zerion-trading
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executezerionCLI commands. These commands perform on-chain operations such as swapping tokens, bridging assets across different blockchains (EVM and Solana), and sending tokens to specific addresses. - [EXTERNAL_DOWNLOADS]: The skill contains instructions to install the
zerion-clipackage globally vianpm. This is a vendor-provided tool required for the skill's core functionality. - [PROMPT_INJECTION]: The skill incorporates an attack surface for indirect prompt injection as it processes user-provided parameters (amounts, token symbols, and addresses) into shell commands. However, the documentation indicates the CLI performs strict numeric parsing and validation (e.g., for slippage and flags), which provides a layer of sanitization.
Audit Metadata