prediction-market-data-zh
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a dedicated client for the AIsa API, which is the official service provided by the skill author. All operations are read-only and restricted to the vendor's domain.
- [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by requiring the
AISA_API_KEYto be provided via environment variables. No sensitive credentials or API keys are hardcoded in the source code or instructions. - [EXTERNAL_DOWNLOADS]: Network operations are limited to communicating with
api.aisa.oneusing HTTPS. The skill does not download external scripts, binaries, or third-party dependencies during execution. - [INDIRECT_PROMPT_INJECTION]: The tool processes user-supplied data such as search terms, market tickers, and wallet addresses. It correctly mitigates potential injection risks by using
urllib.parse.quoteto sanitize all parameters before including them in API requests, and it lacks dangerous capabilities like file writing or command execution.
Audit Metadata