coinapi-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for read-only market data access and adheres to standard security practices for API interaction.
- [EXTERNAL_DOWNLOADS]: The skill fetches an OpenAPI schema from the author's GitHub repository (holon-run) to configure the uxc CLI tool. This is a standard configuration step for vendor-provided tooling.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external market data from rest.coinapi.io. It includes guardrails that instruct the agent to use JSON output and specific field parsing, which helps mitigate risks associated with processing untrusted external data.
Audit Metadata