sentinel-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The file
scripts/sentinel_config.pycontains a utility functionmcporter_callthat utilizessubprocess.runto execute themcporterCLI. This is the standard, documented method for skills on this platform to interact with the trading backend. The function is used programmatically with hardcoded tool identifiers, which mitigates the risk of command injection from external data.- [SAFE]: The skill implements best practices for secret management by utilizing environment variables (e.g.,MANTIS_WALLET) and local configuration files (config/sentinel-config.json) with placeholders, ensuring that sensitive credentials are not hardcoded.- [SAFE]: All external market data retrieved via API calls is processed using deterministic mathematical logic and scoring algorithms. The skill does not pass untrusted content back to the LLM for interpretation, effectively neutralizing the risk of indirect prompt injection.
Audit Metadata