aeon-token-movers
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches market trend data and token information from CoinGecko's official public API. CoinGecko is a well-known and trusted service for cryptocurrency market data.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes data (token names, descriptions) from an external API. This is a standard risk for data-ingestion skills and is managed by platform-level guardrails.
- Ingestion points: CoinGecko API response data specified in
SKILL.md. - Boundary markers: Absent.
- Capability inventory: Network access via
curlto fetch market data. - Sanitization: Not specified in the skill instructions.
Audit Metadata