coinmarketcap-mcp-skill
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the official CoinMarketCap MCP endpoint (mcp.coinmarketcap.com), which is a well-known and reputable service for financial and cryptocurrency data.
- [SAFE]: Authentication is managed through the uxc tool's secure binding system. The instructions guide the user to store API keys in environment variables or secret managers (like 1Password) rather than hardcoding them into the skill files.
- [SAFE]: Command execution is limited to the coinmarketcap-mcp-cli (a link to the uxc tool), which performs read-only operations for market quotes, technical analysis, and news.
- [SAFE]: The validation script (validate.sh) is a developer utility used to ensure documentation standards are met. It performs static text analysis using ripgrep and does not include any malicious execution patterns.
- [SAFE]: The skill implements safety-conscious patterns by instructing the agent to perform help-first discovery and prioritize structured JSON parsing, which mitigates risks associated with processing external API data.
Audit Metadata