saturnswap-limit-orders-operator
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Node.js script (
scripts/sign-and-submit.js) to process transactions. This script imports core logic from scripts located in parent directories relative to the skill folder (../../../scripts/saturnswap-signer.jsand../../../scripts/saturnswap-client.js). - [CREDENTIALS_UNSAFE]: The skill is designed to manage and use sensitive wallet signing keys (
PAYMENT_SKEY_HEXorPAYMENT_SKEY_CBOR) to sign blockchain transactions. While keys are not hardcoded, their use in a scripted environment requires careful handling. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
- Ingestion points: Receives unsigned transaction hex strings and IDs from a 'guidance skill' (SKILL.md).
- Boundary markers: Explicit instructions require manual user confirmation before any signing or submission action.
- Capability inventory: The skill can sign data and submit it to a blockchain endpoint via network calls.
- Sanitization: The transaction hex input is not validated or sanitized within the script before it is signed.
Audit Metadata