CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

llm-trading-agent-security

Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling. Use when an autonomous agent holds wallet or transaction authority and its limits, simulation, or key handling need review.

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, well-organized pattern catalog: token-efficient prose, concrete code for each defense layer, and a useful pre-deploy checklist. The main gaps are stub dependencies in the code examples, a constants-only MEV section, and the absence of an explicit validate-fix-retry feedback loop.

Suggestions

Make `safe_execute` and `SpendLimitGuard` self-contained (resolve `self.w3`/`self.account`/`decode_uint256` and show `_get_24h_spend`/`_record_spend`) so the examples are copy-paste executable.

Turn the MEV section into actionable guidance, e.g. show routing a transaction through the private RPC and setting `min_amount_out` from `MAX_SLIPPAGE_BPS`, rather than declaring bare constants.

Add a brief recovery loop for failures: what to do after a `halt`, `SlippageError`, or failed simulation (alert, review, resume conditions) to complement the circuit breaker.

DimensionReasoningScore

Conciseness

The body is lean: a one-line threat-model intro, a two-sentence "Layer the defenses" rationale, six short code examples each followed by at most one line of guidance, and a closing checklist. No explanations of concepts Claude already knowns; every section earns its tokens, fitting the top anchor over 4.

5 / 5

Actionability

Five examples give concrete near-executable code, but they are not copy-paste ready: `safe_execute` depends on undefined `self.w3`, `self.account`, and `decode_uint256`; `SpendLimitGuard._get_24h_spend`/`_record_spend` are stubs; and the MEV section is three constants (`PRIVATE_RPC`, `MAX_SLIPPAGE_BPS`, `deadline`) with no usage. Concrete code with minor gaps fits anchor 4 rather than 5.

4 / 5

Workflow Clarity

Validation checkpoints are present despite the destructive context (simulate-before-send, mandatory `min_amount_out`, circuit-breaker `halt`, pre-deploy checklist), so the destructive-operation cap does not bind. However, the content is a pattern catalog rather than a sequenced workflow, and there is no explicit feedback loop for what to do after a `halt` or `SlippageError` — anchor 4 (most checkpoints, minor gaps) fits better than 5.

4 / 5

Progressive Disclosure

No bundle files exist, and the ~128-line body is well-organized under clear section headers with a closing checklist, making it easy to navigate. Anchor 4 fits: most content is appropriately placed, but the six standalone pattern sections (e.g. the thin MEV section) all live inline in one file with no reference split, and the top anchor presumes well-signaled one-level-deep references.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it enumerates the skill's concrete coverage comprehensively, uses third-person voice, and pairs it with an explicit 'Use when' trigger tied to wallet/transaction authority. The only weakness is that natural synonyms a user might say (trading bot, DeFi, on-chain) are absent from the trigger terms.

Suggestions

Add common synonyms to the trigger, e.g. "Use when building or auditing a trading bot, on-chain execution assistant, or DeFi agent with wallet authority..." to catch more natural user phrasings.

DimensionReasoningScore

Specificity

"Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling" enumerates six concrete, domain-specific capabilities matching the body's coverage. This is comprehensive rather than having only minor gaps, so it fits the top anchor rather than 4.

5 / 5

Completeness

The "what" is explicit ("Security patterns for autonomous trading agents... Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling") and the "when" is a concrete explicit trigger ("Use when an autonomous agent holds wallet or transaction authority and its limits, simulation, or key handling need review"). Both are clearly and explicitly answered.

5 / 5

Trigger Term Quality

Natural terms like "autonomous trading agents", "wallet", "spend limits", "MEV", and "key handling" are present, but common synonyms users might say ("trading bot", "DeFi", "on-chain", "crypto") are missing. Good coverage with a few natural terms absent fits anchor 4, not 5.

4 / 5

Distinctiveness Conflict Risk

The niche (security for agents with "wallet or transaction authority") has distinct domain-specific triggers, minimizing conflict with general security or prompt-injection skills. Triggers are domain-unique rather than merely mostly distinct, fitting anchor 5 over 4.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

affaan-m/ECC

Path

skills/llm-trading-agent-security/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.