spot
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of system utilities
curlandopensslwithin its reference materials to facilitate communication with KuCoin API servers and handle HMAC-SHA256 signing of authentication headers. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external KuCoin API endpoints. This introduces a surface where instructions could theoretically be embedded in API responses (e.g., in market announcements or metadata), representing a standard indirect injection vulnerability surface for API-integrated tools.
Audit Metadata