skills/aeonfun/aeon/unlock-monitor/Gen Agent Trust Hub

unlock-monitor

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from multiple external sources and incorporates it into agent-generated notifications and logs. There are no explicit instructions or delimiters defined to prevent the agent from acting on instructions potentially embedded in the third-party market data.
  • Ingestion points: Data is retrieved from tokenomist.ai, defillama.com, cryptorank.io, dropstab.com, and coingecko.com.
  • Boundary markers: Absent; the data is interpolated directly into analysis steps and notification templates.
  • Capability inventory: The skill has write access to the file system (contents:write), can execute a local notification utility (./notify), and uses curl for network requests.
  • Sanitization: No specific escaping or validation logic is defined for the external text retrieved via WebFetch or WebSearch.
  • [COMMAND_EXECUTION]: The skill triggers a local script (./notify) to deliver alerts and specifies the use of the curl utility for direct network operations.
  • [EXTERNAL_DOWNLOADS]: The skill fetches market metrics and vesting schedules from well-known cryptocurrency analytics services, including Tokenomist, DeFiLlama, CoinGecko, Cryptorank, and DropsTab.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:35 PM