crypto-ta-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes a testing snippet that fetches market data from CoinGecko's public API. CoinGecko is a recognized and well-known provider of cryptocurrency data. The fetch operation is used for legitimate analysis purposes.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from market APIs and OHLCV sources. This represents an ingestion surface for indirect prompt injection if an attacker were to manipulate the data source content. However, the skill's functionality is limited to deterministic mathematical analysis, and it lacks high-risk capabilities like arbitrary command execution or network exfiltration based on data content, making this surface low risk.\n- [SAFE]: The analysis logic is implemented using pure mathematical formulas in Python without the use of dangerous functions like eval() or exec(). No evidence of credential harvesting, persistent access, or obfuscation was found in the scripts or documentation.
Audit Metadata