historical-trades
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with api.domeapi.io to retrieve trade statistics and history. This activity is restricted to data retrieval and matches the skill's primary function.
- [PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection because it processes data from an external source.
- Ingestion points: Data is fetched from the DOME API in scripts/historicalTrades.ts.
- Boundary markers: The skill does not include specific markers to delimit the retrieved trade data or warn the agent about potential instructions inside the data.
- Capability inventory: The skill uses the fetch API for network requests. It lacks dangerous capabilities like local file manipulation or system command execution.
- Sanitization: String fields from the API response (such as market titles or token labels) are not sanitized for potential injection content.
Audit Metadata