zerion-trading

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute zerion CLI commands. These commands perform on-chain operations such as swapping tokens, bridging assets across different blockchains (EVM and Solana), and sending tokens to specific addresses.
  • [EXTERNAL_DOWNLOADS]: The skill contains instructions to install the zerion-cli package globally via npm. This is a vendor-provided tool required for the skill's core functionality.
  • [PROMPT_INJECTION]: The skill incorporates an attack surface for indirect prompt injection as it processes user-provided parameters (amounts, token symbols, and addresses) into shell commands. However, the documentation indicates the CLI performs strict numeric parsing and validation (e.g., for slippage and flags), which provides a layer of sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 06:53 PM