upbit-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and documentation include common shell commands for setting up a CLI alias using the
uxctool. These commands (uxc link,command -v,jq,rg) are standard for integrating the Upbit API and performing local validation of skill files. - [EXTERNAL_DOWNLOADS]: The skill references a curated OpenAPI schema hosted on the author's official GitHub repository (
github.com/holon-run/uxc/...). This is a legitimate source for the skill's own configuration and metadata. - [CREDENTIALS_UNSAFE]: The skill explicitly states that the public market endpoints do not require authentication and warns against attempting to use private API endpoints, citing the complexity of Upbit's JWT-based authentication as a reason for excluding it from this version. This represents a security-conscious design choice.
Audit Metadata