skills/kucoin/kucoin-skills-hub/spot/Gen Agent Trust Hub

spot

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of system utilities curl and openssl within its reference materials to facilitate communication with KuCoin API servers and handle HMAC-SHA256 signing of authentication headers.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external KuCoin API endpoints. This introduces a surface where instructions could theoretically be embedded in API responses (e.g., in market announcements or metadata), representing a standard indirect injection vulnerability surface for API-integrated tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:13 PM