defi-safety-shield
Fail
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves security data from several well-known and reputable third-party services in the DeFi space.\n
- Evidence: Accesses GoPlus Security API (
api.gopluslabs.io) for token risk, address flags, and phishing site verification.\n - Evidence: Fetches protocol metrics and audit status from the DeFiLlama API (
api.llama.fi).\n - Evidence: Queries Blockscout explorers (e.g.,
eth.blockscout.com,base.blockscout.com) to audit wallet token approvals.\n- [SAFE]: The presence of phishing domains such asapp.uniswop.orgis safe as they are used as test targets for thephishing_detector.pyscript to demonstrate detection logic.\n- [SAFE]: Automated scanner flags for Blockscout subdomains appear to be false positives, as these are legitimate infrastructure providers for the skill's wallet audit functionality.\n- [SAFE]: All script functionality is restricted to read-only operations. The skill does not require or request private keys, seed phrases, or wallet connection permissions.\n- [SAFE]: Input parameters such as Ethereum addresses are validated using strict regular expression patterns (^0x[a-fA-F0-9]{40}$) to prevent injection or malformed requests.
Recommendations
- Contains 4 malicious URL(s) - DO NOT USE
Audit Metadata