aster-api-websocket-v3

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill establishes an interface for the agent to receive real-time data from the Aster Futures WebSocket API (wss://fstream.asterdex.com), which introduces an indirect prompt injection surface.
  • Ingestion points: Market data streams (e.g., aggregate trades, book depth) and user-specific events (e.g., account and order updates) as defined in SKILL.md and reference.md.
  • Boundary markers: No specific delimiters or instructions to ignore commands within the data are established for the incoming WebSocket payloads.
  • Capability inventory: The skill enables the agent to monitor and parse financial data streams, which is typically used for automated trading or portfolio management.
  • Sanitization: No explicit validation or sanitization routines are described for the received JSON payloads.
  • [NO_CODE]: The skill consists exclusively of markdown documentation and YAML metadata; no Python scripts, Node.js packages, or shell commands are included.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 03:06 PM