Security audit
Security checks for vulnerabilities and agentic risk
This is an instruction-only DeFi trading helper, but it should be reviewed because it can help submit and cancel real crypto orders while its stated scope and safety disclosures are too narrow.
Install only if you intend to let an agent prepare Spot/Orbs DeFi orders. Before signing or submitting anything, verify token addresses, chain ID, amount decimals, recipient, approval amount, deadline, nonce, order shape, relay endpoint, and any cancellation digest; treat signed payloads as sensitive and require the agent to show the final transaction or typed data first.
'{order: $typed[0].message, signature: $sig, status: "pending"}' \
> ./relay-payload.json
curl -fsS -X POST 'https://agents-sink.orbs.network/orders/new' \
-H 'content-type: application/json' \
--data @./relay-payload.json
```status: "pending",
};
const response = await fetch("https://agents-sink.orbs.network/orders/new", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify(relayPayload),No suspicious patterns detected.