@1247/yield-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from
yields.llama.fi. This is a well-known DeFi data source used for legitimate analytical purposes. - [PROMPT_INJECTION]: The skill processes external API data, creating a potential surface for indirect prompt injection.
- Ingestion points: Fetches data from
https://yields.llama.fi/poolsinscripts/scan_pools.py. - Boundary markers: The script validates and filters all external data against hardcoded lists of supported protocols and chains.
- Capability inventory: On-chain execution is supported via the
walletskill, but the documentation requires loading thewallet-policyskill first. - Sanitization: Uses structured JSON parsing with validation of expected data types.
- [SAFE]: No security issues such as obfuscation, hardcoded credentials, or unauthorized persistence were identified.
Audit Metadata