coinbase-cdp-connector
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and run the@coinbase/cdp-clipackage. This is an official tool provided by Coinbase, a well-known financial services organization. - [COMMAND_EXECUTION]: The skill performs shell command execution through the
cdpCLI to manage wallets, check accounts, and interact with the Base Sepolia testnet faucet. - [PROMPT_INJECTION]: The skill functions as an execution layer for orders generated by other agent components (such as a crypto daytrading agent), which creates an indirect prompt injection surface where external data could influence trading actions.
- Ingestion points: Processes
Orderobjects containingstrategy_refmetadata from upstream agents inSKILL.md. - Boundary markers: The documentation references an immutable audit log to record operations.
- Capability inventory: Order execution, wallet management, and onchain payment operations via the CDP CLI.
- Sanitization: Incorporates deterministic hard caps in
connectors/hard_caps.pythat operate outside the LLM's influence and requires a date-matchedCONFIRM_LIVEvariable for live execution.
Audit Metadata