spot
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or security vulnerabilities were identified in the skill files. The instructions provided are consistent with the stated purpose of cryptocurrency trading.
- [CREDENTIALS_UNSAFE]: The skill defines a protocol for handling sensitive HTX API keys and secrets. It includes specific safety instructions for the agent to never display full secrets to the user, requiring masking of the secret key and only partial display of the API key.
- [COMMAND_EXECUTION]: The skill enables the agent to perform financial transactions via the HTX API. To mitigate the risk of unauthorized or accidental trades, the skill implements a required safety confirmation step where the user must explicitly type 'CONFIRM' before any mainnet transaction is processed.
- [EXTERNAL_DOWNLOADS]: The skill communicates with official and well-known HTX API endpoints (api.huobi.pro and api-aws.huobi.pro). These network operations are necessary for the skill's functionality and target trusted infrastructure.
Audit Metadata