trade-tokens
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx agnic@latestto download and execute the AgnicPay command-line interface from the NPM registry. This package is provided by the vendor to facilitate the skill's primary trading functions. - [COMMAND_EXECUTION]: The skill employs the
Bashtool to run commands for checking balances and performing trades. It follows best practices by recommending a--dry-runto the user before final execution. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it handles untrusted user input for token names and amounts.
- Ingestion points: User-supplied parameters for
<amount>,<sell_token>, and<buy_token>inSKILL.md. - Boundary markers: None present.
- Capability inventory: Command execution via
BashinSKILL.md. - Sanitization: No input validation or filtering is defined in the skill logic.
Audit Metadata