tracking-crypto-prices
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time and historical market data from CoinGecko (
api.coingecko.com) and Yahoo Finance (via theyfinancelibrary). These are well-known and reputable financial data providers. - [COMMAND_EXECUTION]: The skill uses the
Bash(python:*)tool to execute its internal Python scripts, such asprice_tracker.py, to perform price lookups and data processing. This is the intended mechanism for the skill's operation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs (CoinGecko and Yahoo Finance). This represents a potential attack surface for indirect prompt injection if the returned data were to contain malicious instructions, though the risk is low for this specific data-fetching utility.
- [SAFE]: The skill references resources from the author's domains, including
tonsofskills.comandintentsolutions.io. These references are consistent with the stated authorship and do not perform unauthorized operations. - [SAFE]: API keys are managed securely through environment variables (
COINGECKO_API_KEY) or configuration files using placeholders, avoiding the use of hardcoded credentials.
Audit Metadata