aeon-token-movers
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches market data, search trends, and asset details from the public CoinGecko API (api.coingecko.com).
- [COMMAND_EXECUTION]: Provides example
curlcommands to interact with the CoinGecko API endpoints for data retrieval. - [PROMPT_INJECTION]: The skill ingests data from an external API (CoinGecko), creating a surface for indirect prompt injection from untrusted data (e.g., token names or descriptions). * Ingestion points: api.coingecko.com (referenced in SKILL.md) * Boundary markers: None; responses are processed as raw JSON data * Capability inventory: Network access via
curl; no local file writes or script execution found in analyzed files * Sanitization: Not implemented in the provided instruction set
Audit Metadata