crypto-prices

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches real-time market data from CoinGecko and Coinbase using their official public APIs (api.coingecko.com and api.coinbase.com). These are well-known services and the skill uses them strictly for data retrieval without authentication.
  • [COMMAND_EXECUTION]: The skill uses curl to perform network requests. This is a standard and safe way to interact with public APIs when executed with hardcoded, trusted endpoints as shown in the instructions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes coin names provided by the user to resolve them to API IDs. While this is an ingestion point for untrusted data, the skill includes specific quality checks and anti-patterns to prevent ambiguity and ensure the resolved data matches the user's intent, minimizing the risk of instruction injection via data fields.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 12:04 PM
Security Audit — agent-trust-hub — crypto-prices