dog-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the platform's CLI utility to perform market operations.
- Evidence: In
scripts/dog_config.py, themcporter_callfunction usessubprocess.runto execute commands. These commands are constructed using a list structure and JSON-serialized arguments, which prevents shell injection. - Evidence:
README.mdandSKILL.mdprovide a bash loop example (nohup bash -c 'while true; do python3 ...') for users to run the scanner in a detached background process. - [EXTERNAL_DOWNLOADS]: The skill's setup process involves downloading its core logic and configuration from a remote source.
- Evidence:
README.mdandSKILL.mdincludecurlcommands to fetch files from the author's official repository atgithub.com/Senpi-ai/senpi-skills. These resources are necessary for the skill's deployment and originate from the vendor's infrastructure. - [SAFE]: The skill follows security best practices for state management and configuration handling.
- Evidence: Secret management is handled via environment variables and configuration placeholders (
${WALLET_ADDRESS}) rather than hardcoded credentials. - Evidence: Local state tracking for trade limits is managed via atomic file writes in
scripts/dog_config.pyto ensure data integrity.
Audit Metadata