skills/gate/gate-skills/gate-info-coinanalysis/Snyk

gate-info-coinanalysis

Fail

Audited by Snyk on Sep 19, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (medium risk: 0.30). The skill contains functionality to self-update by fetching and executing remote code from a GitHub repository via scripts, which represents untrusted remote code execution and unauthorized auto-updating capability.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-authored free text via news articles (news_feed_search_news) and social sentiment feeds (news_feed_get_social_sentiment).

Issues (2)

E004

CRITICAL

Prompt injection detected in skill instructions.

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

CRITICAL

Analyzed

Sep 19, 2026, 09:03 AM

Issues

2