aicoin-market
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill's instructions or implementation scripts.
- [EXTERNAL_DOWNLOADS]: Fetches market data, news, and project details from the official AiCoin Open API ("open.aicoin.com"). These requests are performed using standard HTTPS and authenticated via HMAC signing.
- [CREDENTIALS_UNSAFE]: Includes public, rate-limited free-tier API keys in "lib/defaults.json". These are provided by the vendor to enable immediate functionality and are clearly documented as public resources.
- [DATA_EXPOSURE]: Features built-in commands ("api_key_info", "update_key") to manage the skill's specific configuration in ".env" files. These utilities are restricted to verifying and updating AiCoin API credentials and do not access or expose sensitive system-level files or environment variables.
Audit Metadata