rhino-strategy

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Extensive analysis of the skill's logic and implementation reveals no malicious patterns, prompt injections, or unauthorized data exfiltration attempts. The strategy focuses purely on automated trading and risk management.- [COMMAND_EXECUTION]: The script rhino_config.py uses subprocess.run to interact with the platform's mcporter utility. This execution is performed using a list of arguments rather than a shell string, which effectively prevents command injection vulnerabilities. The operations are limited to fetching market data and executing orders through the authorized platform.- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and specifications hosted on GitHub. These links point to the official repository of the vendor (Senpi-ai) and are used for informational purposes regarding strategy specifications, posing no security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 05:42 PM