pubfi-morpho-v2-conservative-leaderboard
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (INFO): The skill is well-documented and focuses on data retrieval and filtering of public DeFi metrics. It uses a known, reputable API (api.morpho.org).
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill ingests external data from the Morpho GraphQL API.
- Ingestion points:
https://api.morpho.org/graphqlprovides vault and adapter data. - Boundary markers: None (data is processed for tabular display).
- Capability inventory: Display only. The skill generates a markdown leaderboard for human consumption and does not have write access to sensitive files or execution capabilities based on the provided instructions.
- Sanitization: None specified, but the data is mapped to specific schemas (USDC/ETH addresses), which inherently acts as a strict validator.
- [COMMAND_EXECUTION] (LOW): The skill mentions executing a local Python script (
scripts/morpho_v2_conservative_leaderboard.py). While this script was not provided for analysis, the logic described in the SKILL.md for its execution is consistent with benign data processing and formatting.
Audit Metadata