crypto-com-exchange

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official @cryptocom/cdcx-cli package from npm, which is a well-known and trusted package registry.
  • [COMMAND_EXECUTION]: The skill executes the cdcx CLI to perform various exchange operations (e.g., cdcx account summary, cdcx trade order). These commands are scoped to the intended functionality of a trading skill.
  • [SAFE]: The authentication mechanism uses OAuth (cdcx auth login --oauth), which avoids handling raw API secrets directly within the skill instructions. No malicious patterns such as prompt injection, persistence, or data exfiltration were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:10 PM