Skills
Navigate
skills/coinpaprika/skills/coinpaprika-api/Gen Agent Trust Hub

coinpaprika-api

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches a version header from the author's official GitHub repository to verify that the local skill instructions are current.
  • [REMOTE_CODE_EXECUTION]: Provides an installation command for the official CoinPaprika CLI tool, which downloads and executes a shell script from the vendor's repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests cryptocurrency market data from external API endpoints, which could potentially contain malicious instructions.
  • Ingestion points: SKILL.md (Data from api.coinpaprika.com and api-pro.coinpaprika.com).
  • Boundary markers: Absent.
  • Capability inventory: SKILL.md (Shell command execution via curl and CLI tools).
  • Sanitization: Examples demonstrate the use of jq to parse and validate the structure of JSON responses before the agent processes them.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:46 PM