crypto-com-mcp-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
uxccommand-line tool to interface with Model Context Protocol (MCP) servers. It creates a local aliascrypto-com-mcp-cliusing theuxc linkcommand to manage interactions with the remote endpoint. - [EXTERNAL_DOWNLOADS]: The skill connects to the official Crypto.com MCP endpoint at
https://mcp.crypto.com/market-data/mcp. This targets a well-known cryptocurrency exchange service and is used as intended for market data discovery. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a remote API which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Data is fetched from
https://mcp.crypto.com/market-data/mcpvia theuxctool as described inSKILL.md. - Boundary markers: The skill instructs the agent to focus on the JSON output envelope and stable fields, but does not implement explicit delimiters or markers to separate untrusted data from instructions.
- Capability inventory: The skill performs shell command execution using
uxcand its created aliases. - Sanitization: There is no evidence of programmatic sanitization or filtering of the API responses before they are processed by the agent.
Audit Metadata