xxyy-trade
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the official XXYY API domain (www.xxyy.io) to perform data queries and trade operations.
- [SAFE]: Explicit execution rules are defined that require the agent to obtain user confirmation before submitting any buy or sell orders.
- [SAFE]: Input validation is implemented in both the skill instructions and the MCP server code to verify wallet addresses, contract addresses, and transaction parameters.
- [SAFE]: The skill includes defensive features like honeypot detection and high-tax alerts to protect users from risky on-chain assets.
- [SAFE]: No evidence of obfuscation, unauthorized data exfiltration, or prompt injection attempts was found in the provided files.
Audit Metadata