crypto-prices-criptoya
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to construct and execute shell commands using
curlandjq. These commands include variables such asexchange,coin,fiat, andvolumen. While the skill defines whitelists and validation steps, this pattern involves executing commands built from potentially untrusted user input. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API, which creates a surface for indirect prompt injection if the remote source were to return malicious content designed to influence the agent's behavior.
- Ingestion points: Responses from the
criptoya.comAPI endpoints retrieved viacurlas described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or "ignore instructions" markers for the API output.
- Capability inventory: The skill uses
curlfor network access andjqfor JSON manipulation. - Sanitization: The workflow includes steps for input validation against defined whitelists for coins and exchanges, and specifies checking for text-based error responses ("Invalid pair") from the API.
Audit Metadata