The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill includes hardcoded default credentials for the AiCoin API.
Evidence: lib/defaults.json contains accessKeyId and accessSecret values used for authentication with open.aicoin.com.
[REMOTE_CODE_EXECUTION]: The skill automatically installs external dependencies from the npm registry at runtime.
Evidence: scripts/exchange.mjs calls execSync('npm install --omit=dev', ...) if the ccxt package is missing during the exchange client initialization.
[COMMAND_EXECUTION]: The skill executes shell commands using the node:child_process module.
Evidence: Use of execSync in scripts/exchange.mjs to run package management commands.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to external services and provides referral links.
Evidence: Fetches market data from open.aicoin.com and downloads the ccxt library from the official npm registry.
Evidence: Multiple referral links in SKILL.md and scripts/register.mjs pointing to the jump.do domain for exchange registration.
[INDIRECT_PROMPT_INJECTION]: The skill's input handling surface could be targeted via indirect prompt injection to trigger sensitive operations.
Ingestion points: User-provided JSON parameters in scripts/exchange.mjs (e.g., arguments for create_order, transfer, and save_key actions).
Boundary markers: None implemented in the scripts to delimit user input from agent instructions.
Capability inventory: Performing financial transactions, writing to sensitive configuration files (.env), and executing shell commands.
Sanitization: Inputs are parsed as JSON and basic type conversions (e.g., Number()) are performed, but data is directly used in downstream API calls.
[DYNAMIC_EXECUTION]: The skill dynamically manages its execution environment by installing packages at runtime.
Evidence: scripts/exchange.mjs triggers a shell subprocess to install the ccxt package if it is not found in the local workspace.

aicoin-account