zerion-vaultsfyi-rebalance
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
zerionCLI to perform critical operations such as checking wallet positions, executing token swaps, and performing cross-chain bridges. These commands are integral to the rebalancing workflow. - [EXTERNAL_DOWNLOADS]: The documentation directs the user to install the
zerion-cliglobally usingnpm install -g zerion-cli. This is a vendor-recognized package necessary for the skill's functionality. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8).
- Ingestion points: Data from external vaults and DeFi protocols is brought into the agent's context through tools like
vault_details,position_details, andtransaction_context. - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to treat data from the vaults.fyi MCP as untrusted or to ignore instructions embedded within that data.
- Capability inventory: The skill possesses significant capabilities, including the ability to move assets, perform swaps, and build blockchain transactions via the Zerion CLI and the
build_vault_txtool. - Sanitization: There is no evidence of sanitization or strict schema validation for the external content before it is processed by the agent.
Audit Metadata