unlock-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from multiple external sources and incorporates it into agent-generated notifications and logs. There are no explicit instructions or delimiters defined to prevent the agent from acting on instructions potentially embedded in the third-party market data.
- Ingestion points: Data is retrieved from tokenomist.ai, defillama.com, cryptorank.io, dropstab.com, and coingecko.com.
- Boundary markers: Absent; the data is interpolated directly into analysis steps and notification templates.
- Capability inventory: The skill has write access to the file system (
contents:write), can execute a local notification utility (./notify), and usescurlfor network requests. - Sanitization: No specific escaping or validation logic is defined for the external text retrieved via WebFetch or WebSearch.
- [COMMAND_EXECUTION]: The skill triggers a local script (
./notify) to deliver alerts and specifies the use of thecurlutility for direct network operations. - [EXTERNAL_DOWNLOADS]: The skill fetches market metrics and vesting schedules from well-known cryptocurrency analytics services, including Tokenomist, DeFiLlama, CoinGecko, Cryptorank, and DropsTab.
Audit Metadata