skills/hummingbot/skills/lp-agent/Gen Agent Trust Hub

lp-agent

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts and Python subprocesses to manage local Docker containers and infrastructure.
  • deploy_hummingbot_api.sh uses Docker Compose and Git to install and manage the Hummingbot API trading server.
  • setup_gateway.sh and manage_gateway.py interact with the local API to start and configure the Hummingbot Gateway.
  • deploy_hummingbot_api.sh creates a local sudo shim to facilitate command execution in restricted or containerized environments where the sudo binary may be missing.
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from trusted and well-known sources to support its primary function.
  • deploy_hummingbot_api.sh clones the official Hummingbot API repository from GitHub (hummingbot/hummingbot-api).
  • visualize_lp_positions.py generates an interactive HTML dashboard that loads standard libraries (React, Babel, Recharts) from Cloudflare's CDN (cdnjs.cloudflare.com).
  • list_meteora_pools.py and get_meteora_pool.py query the official Meteora DLMM API for market data.
  • [SAFE]: The skill follows security best practices for its intended use case.
  • add_wallet.py uses the getpass module to securely prompt for Solana private keys, ensuring sensitive credentials are not stored in shell command history.
  • All management scripts interact with the user's local Hummingbot instance via standard REST API calls with basic authentication.
  • Data analysis scripts (export_lp_positions.py, visualize_lp_positions.py) operate on local SQLite databases to process trading history.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 09:27 AM