treasures-b2b-api
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill was evaluated across all threat categories and no malicious patterns or security vulnerabilities were identified. It provides legitimate technical documentation for a trading API.
- [EXTERNAL_DOWNLOADS]: The documentation references standard blockchain interaction libraries, including
viem,@noble/curves, and@solana/web3.js. These are well-established dependencies for managing wallets and signing transactions. - [DATA_EXFILTRATION]: The skill instructs the agent to handle wallet addresses and generate cryptographic signatures to be sent to the vendor's API at
api.treasures.io. This communication is necessary for the intended trading functionality and does not involve unauthorized access to or transmission of sensitive local files. - [INDIRECT_PROMPT_INJECTION]: The skill ingests market data, ticker catalogs, and portfolio balances from the external Treasures API. The data is handled in a structured manner for display and financial logic, minimizing the risk of instruction injection via API responses.
Audit Metadata