treasury-exchange-rate
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its primary execution script and integrity hash from the fittings.sh domain.
- [COMMAND_EXECUTION]: A Node.js sidecar script is used to execute the payment handshake and data requests.
- [DATA_EXFILTRATION]: Cryptographic signatures are transmitted to the API gateway to authorize transaction payments.
- [REMOTE_CODE_EXECUTION]: The execution script dynamically loads external blockchain libraries to handle payment signing.
- [CREDENTIALS_UNSAFE]: Ingests a blockchain private key from an environment variable to sign payment authorizations.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves financial data from a remote source. 1. Ingestion points: API responses. 2. Boundary markers: None. 3. Capability inventory: Cryptographic signing and network requests. 4. Sanitization: Default JSON parsing.
Audit Metadata