skills/helius-labs/core-ai/dflow/Gen Agent Trust Hub

dflow

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute a shell script from https://cli.dflow.net to install the DFlow Agent CLI. It also suggests installing the Helius MCP server via npx helius-mcp@latest. These patterns represent the official installation methods for the primary tools supported by this skill.
  • [COMMAND_EXECUTION]: The skill utilizes the dflow CLI for autonomous trading, wallet management, and setting guardrails. This execution is core to the skill's intended functionality for managing Solana trades and assets.
  • [DATA_EXFILTRATION]: The skill manages sensitive data, including Solana private keys and API keys, by guiding users to use the Open Wallet Standard (OWS). This standard ensures that private keys are encrypted and stored locally in ~/.ows/, preventing exposure to the agent or external parties.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted market metadata and search results from DFlow's public APIs. While this creates a surface for potential indirect prompt injection (e.g., via malicious market names), the skill's reliance on structured JSON parsing and local safety limits helps manage this risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 07:10 PM