liquidity-planner
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executed shell scripts are limited to passive queries using
curland structured parsing withjq. Examples include pulling TVL, APY, and pool statistics from the DexScreener and DefiLlama public APIs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs (DexScreener/DefiLlama) and addresses discovered via web searches. It implements strict input boundary sanitation, instructing the model to validate all user-supplied addresses against standard alphanumeric hex regex requirements (
^0x[a-fA-F0-9]{40}$) and to reject shell metacharacters before any string interpolation into commands occurs. Additionally, user confirmation is explicitly demanded when processing unverified tokens retrieved from external sources.
Audit Metadata