skills/intenxus/aave-ai/aave-planner/Gen Agent Trust Hub

aave-planner

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious behaviors or vulnerabilities were identified during the analysis.
  • [COMMAND_EXECUTION]: The skill provides local utility scripts for position simulation and strategy planning.
  • These scripts are designed to be executed via npx tsx as documented in SKILL.md.
  • The execution is limited to the logic contained within the skill's own script directory.
  • [EXTERNAL_DOWNLOADS]: The scripts interact with external blockchain RPC infrastructure to retrieve live protocol data.
  • Connections are made to public RPC endpoints such as ethereum.publicnode.com and arbitrum.publicnode.com using the viem library.
  • The operations are read-only and target well-known AAVE V3 smart contract addresses on Ethereum and Arbitrum.
  • [DATA_EXPOSURE]: The skill processes user-provided blockchain addresses to query account state.
  • Input validation is implemented using regular expressions (e.g., ^0x[a-fA-F0-9]{40}$) to ensure address integrity.
  • The data retrieved is publicly available on the blockchain and does not involve private keys or sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 06:09 AM