crypto-market-data
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as a transparent wrapper for the AIsa API (api.aisa.one). Its behaviors, including network requests and the use of the AISA_API_KEY environment variable, are consistent with its documented purpose and vendor-authored scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from an external API, which acts as a potential ingestion point for untrusted content. 1. Ingestion points: External market data is ingested via scripts/coingecko_client.py through network calls to api.aisa.one. 2. Boundary markers: Absent; the data is returned as raw JSON to the agent context. 3. Capability inventory: scripts/coingecko_client.py utilizes urllib.request for outbound network operations. 4. Sanitization: Absent; the script performs standard JSON parsing but does not filter the specific content of the API responses for malicious instructions.
Audit Metadata