defi-transaction-builder
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly instructs the agent never to request sensitive information such as private keys or seed phrases, and provides a clear workflow for generating unsigned payloads only.
- [COMMAND_EXECUTION]: The bundled script
scripts/validate_tx_bundle.pyis used for local validation of transaction JSON. It uses only Python standard libraries (argparse, json, re, sys) and performs regex-based validation of addresses and hex data without network access or unsafe evaluation. - [CREDENTIALS_UNSAFE]: The validation script includes a proactive check for forbidden sensitive keys (like 'private' or 'seed') within the transaction data, serving as an additional layer of protection against accidental credential exposure.
Audit Metadata