Skills
Navigate
skills/jeremylongshore/tons-of-skills-marketplace/tracking-crypto-portfolio/Gen Agent Trust Hub

tracking-crypto-portfolio

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes cryptocurrency holdings from user-provided JSON files, which could contain untrusted data.\n
  • Ingestion points: The scripts/portfolio_loader.py script reads the file content from a path supplied to the CLI via the --portfolio argument in scripts/portfolio_tracker.py.\n
  • Boundary markers: None are implemented in the instructions or code to explicitly delimit user data from agent instructions.\n
  • Capability inventory: The skill uses Bash to execute local Python scripts, Read for portfolio file access, and Write for exporting JSON/CSV results.\n
  • Sanitization: The skill validates numeric data types for quantities and cost basis but does not perform sanitization on string inputs like coin symbols, wallet names, or notes, which are later formatted for the agent's view.\n- [EXTERNAL_DOWNLOADS]: The skill fetches real-time market data from an external provider.\n
  • Evidence: The scripts/price_fetcher.py script makes network requests to the CoinGecko API at https://api.coingecko.com/api/v3 to retrieve current valuations. CoinGecko is a well-known service for cryptocurrency market information.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:49 AM