defillama-prices-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a curated OpenAPI schema from the vendor's official GitHub repository (
holon-run/uxc) to configure theuxccommand-line interface. This is a standard configuration step for the uxc ecosystem and uses a trusted vendor resource. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the public
coins.llama.fiAPI. The risk is minimal as the skill is designed for read-only price data and instructs the agent to use structured JSON output rather than raw text, which facilitates safer parsing. No dangerous capabilities (such as file writes or arbitrary command execution) are exposed to the ingested data.
Audit Metadata