The Agent Skills Directory

[COMMAND_EXECUTION]: The documentation provides multiple shell script examples using curl and openssl to demonstrate how to sign requests and interact with the KuCoin API. While these are educational, they represent a mechanism for command execution within the agent's environment.
[CREDENTIALS_UNSAFE]: The skill's SKILL.md file contains a 'KuCoin Accounts' section with placeholder values for api_key, api_secret, and passphrase. Additionally, the 'Security' section instructs users to provide credentials via a specifically formatted text file, which could lead to sensitive data exposure if not managed carefully by the host environment.
[INDIRECT_PROMPT_INJECTION]: As a trading skill that potentially processes market data and external API responses, there is an inherent surface for indirect prompt injection if malicious data is embedded in contract names, status messages, or other externally sourced strings.

futures-trading