aicoin-onchain
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill adheres to the principle of least privilege by performing all cryptographic signing of transactions locally using the
ethersand@solana/web3.jslibraries. Sensitive private keys are loaded from local environment files and are never transmitted over the network; only signed transaction data is sent to the OKX broadcast gateway. - [COMMAND_EXECUTION]: The skill provides automated scripts for performing blockchain swaps. Risks are mitigated through explicit human-in-the-loop requirements in the
SKILL.mdinstructions and automated safety checks inscripts/trade.mjsthat block transactions involving honeypot tokens or price impact exceeding 10%. - [CREDENTIALS_UNSAFE]: Security for API keys and private keys is managed through
.envfiles. The skill includes specific warnings and instructions to prevent the agent from leaking these secrets via environment printing commands. - [EXTERNAL_DOWNLOADS]: The skill interacts with reputable blockchain infrastructure, including official chain RPCs and the OKX Web3 DEX API. These connections are verified as safe under the trust policy as they are well-known services and essential for the skill's primary functionality.
Audit Metadata