The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill is configured to interact with well-known and reputable cryptocurrency exchange APIs and data aggregators, such as Binance, Coinbase, and CoinGecko. These network requests are consistent with the skill's stated purpose of fetching market data.
[INDIRECT_PROMPT_INJECTION]: The skill acts as a data consumer for external market information. The potential for injection is mitigated by the implementation's focus on numeric data parsing (Decimal) and structured output formatting in scripts/formatters.py, which prevents external string data from being executed as instructions.
Ingestion points: scripts/price_fetcher.py fetches data from external crypto-market subgraphs and APIs.
Boundary markers: Data is structured into tables and JSON blocks with clear headers.
Capability inventory: The skill is restricted to a specific set of arbitrage scripts via the Bash tool scope in the frontmatter.
Sanitization: All ingested market data is cast to numeric Decimal types, naturally filtering out non-numeric malicious payloads.
[CREDENTIALS_UNSAFE]: The configuration file config/settings.yaml does not contain any hardcoded API keys or secrets. It uses null placeholders and directs users to utilize environment variables, which is a security best practice for managing sensitive trading credentials.

finding-arbitrage-opportunities