bithumb-market
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@bithumb-official/bithumb-clipackage via npm. This package is an official vendor resource used to facilitate communication with the Bithumb exchange API. Since the package is authored by the same entity as the skill and serves a clear, legitimate purpose, it does not pose a security risk.\n- [COMMAND_EXECUTION]: The skill executes variousbithumb marketcommands to retrieve public market information. These operations are read-only and do not require API credentials, nor do they access sensitive system files or environment variables. The commands are limited to fetching market data (tickers, order books, candles, and notices).\n- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, obfuscation, or persistence mechanisms were found. The skill's functionality is transparent and strictly aligned with its stated objective of providing public market data.
Audit Metadata