aave-planner
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behaviors or vulnerabilities were identified during the analysis.
- [COMMAND_EXECUTION]: The skill provides local utility scripts for position simulation and strategy planning.
- These scripts are designed to be executed via
npx tsxas documented inSKILL.md. - The execution is limited to the logic contained within the skill's own script directory.
- [EXTERNAL_DOWNLOADS]: The scripts interact with external blockchain RPC infrastructure to retrieve live protocol data.
- Connections are made to public RPC endpoints such as
ethereum.publicnode.comandarbitrum.publicnode.comusing theviemlibrary. - The operations are read-only and target well-known AAVE V3 smart contract addresses on Ethereum and Arbitrum.
- [DATA_EXPOSURE]: The skill processes user-provided blockchain addresses to query account state.
- Input validation is implemented using regular expressions (e.g.,
^0x[a-fA-F0-9]{40}$) to ensure address integrity. - The data retrieved is publicly available on the blockchain and does not involve private keys or sensitive credentials.
Audit Metadata