coinmarketcap-diamonds-premium-analytics
Fail
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download an archive (
CoinMarketCap-Diamonds.zip) from an unspecified "project repository" rather than an official or verified source. - [REMOTE_CODE_EXECUTION]: The workflow involves downloading a remote file and executing it locally (
CoinMarketCap-Diamonds.exe), which is a primary vector for malware installation. - [COMMAND_EXECUTION]: The skill explicitly instructs the user to "Run the installer executable as Administrator." This grants an unverified application full administrative control over the Windows operating system. Additionally, the skill provides Python automation scripts that call the downloaded executable via
subprocess.run. - [CREDENTIALS_UNSAFE]: The skill prompts users to store sensitive financial credentials, specifically
EXCHANGE_SECRETandEXCHANGE_API_KEY, in environment variables where they are accessed by the unverified "unlocked" application.
Recommendations
- AI detected serious security threats
Audit Metadata