The Agent Skills Directory

EXTERNAL_DOWNLOADS (SAFE): The skill requires the installation of sushi and viem via standard package managers. These are well-known, legitimate packages used for interacting with the SushiSwap protocol and the Ethereum blockchain.
DATA_EXFILTRATION (SAFE): The example code references process.env.PRIVATE_KEY for transaction signing. This is a standard practice for managing secrets in a non-hardcoded manner and does not indicate unauthorized data exposure.
PROMPT_INJECTION (LOW): The skill has a surface for indirect prompt injection as it processes data from the SushiSwap Aggregator API. 1. Ingestion points: The getSwap method in references/REFERENCE.md ingests transaction calldata from an external API. 2. Boundary markers: None; the SDK expects to use the API response directly. 3. Capability inventory: The skill uses walletClient.sendTransaction in references/REFERENCE.md to execute transactions. 4. Sanitization: None; the data is used exactly as returned by the API. This risk is inherent to the primary function of the skill and is considered acceptable for its intended purpose.

sushiswap-sdk