pionex-earn-dual
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the @pionex/pionex-ai-kit package from the official npm registry. This is a vendor-owned resource used to provide the necessary command-line interface for the skill's operations.
- [COMMAND_EXECUTION]: Uses the pionex-trade-cli binary to perform market queries, check balances, and execute investment operations. The skill implements robust safety protocols, requiring the agent to use the --dry-run flag and obtain explicit user confirmation before performing any write operations or financial transactions.
- [PROMPT_INJECTION]: The skill processes external market data and account information which could technically serve as an indirect injection surface. However, it mitigates this risk by enforcing a strict, multi-step validation workflow and requiring human verification of all transaction details before execution.
Audit Metadata