swap-quote
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill transmits wallet addresses to the vendor-owned domain tws.trustwallet.com to retrieve swap quotes. This is the intended purpose of the skill and uses the author's official infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses and user-provided addresses. While this constitutes a data ingestion surface, the outputs are restricted to transaction data, and no malicious patterns were identified.
- [DYNAMIC_EXECUTION]: The skill retrieves and displays executable blockchain transaction data, such as EVM calldata and raw transactions. This functionality is essential for the skill's operation and is provided by the trusted vendor API.
Audit Metadata