kraken-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its OpenAPI specification from the vendor's official GitHub repository ('holon-run/uxc'). This is a documented and standard procedure for the 'uxc' tool to discover API endpoints.
- [COMMAND_EXECUTION]: Instructs the agent to use 'uxc link' to create a localized CLI wrapper for Kraken's API. The commands are transparently defined and limited to public market data access.
- [INDIRECT_PROMPT_INJECTION]: Ingests market data (tickers, order books) from the Kraken API. While this involves processing external data, the risk is negligible due to the structured numerical nature of the API responses.
Audit Metadata