aeon-monitor-runners
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external token data and narratives from the GeckoTerminal API (api.geckoterminal.com), which creates a potential surface for indirect prompt injection if malicious actors control token metadata retrieved by the tool.
- Ingestion points: The skill retrieves data from trending_pools and pool listing endpoints as described in SKILL.md.
- Boundary markers: There are no specific instructions or delimiters provided to the agent to treat the external API response as untrusted content.
- Capability inventory: The skill utilizes curl to perform network read operations.
- Sanitization: No explicit sanitization or filtering of the external API content is defined before the data is interpreted by the agent.
Audit Metadata