routing-dex-trades
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves real-time price and gas information from well-known services including 1inch, Paraswap, 0x, and Etherscan. These network operations are strictly limited to official API endpoints and are necessary for the skill's operation.- [DATA_EXFILTRATION]: To obtain quotes, the skill transmits non-sensitive trade parameters (such as token pairs and amounts) to established third-party APIs. This data sharing is required for the intended functionality and does not involve private user information or system credentials.- [CREDENTIALS_UNSAFE]: The skill implements secure credential management by instructing users to provide API keys through environment variables rather than hardcoding them into the source code or configuration files.- [PROMPT_INJECTION]: While the skill processes external data from DEX aggregators, it uses structured JSON parsing and typed data models (located in scripts/quote_fetcher.py). This prevents untrusted external data from being interpreted as instructions by the underlying agent.
Audit Metadata