bithumb-market

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @bithumb-official/bithumb-cli package via npm. This package is an official vendor resource used to facilitate communication with the Bithumb exchange API. Since the package is authored by the same entity as the skill and serves a clear, legitimate purpose, it does not pose a security risk.\n- [COMMAND_EXECUTION]: The skill executes various bithumb market commands to retrieve public market information. These operations are read-only and do not require API credentials, nor do they access sensitive system files or environment variables. The commands are limited to fetching market data (tickers, order books, candles, and notices).\n- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, obfuscation, or persistence mechanisms were found. The skill's functionality is transparent and strictly aligned with its stated objective of providing public market data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:36 AM
Security Audit — agent-trust-hub — bithumb-market