crypto-prices
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time market data from CoinGecko and Coinbase using their official public APIs (
api.coingecko.comandapi.coinbase.com). These are well-known services and the skill uses them strictly for data retrieval without authentication. - [COMMAND_EXECUTION]: The skill uses
curlto perform network requests. This is a standard and safe way to interact with public APIs when executed with hardcoded, trusted endpoints as shown in the instructions. - [INDIRECT_PROMPT_INJECTION]: The skill processes coin names provided by the user to resolve them to API IDs. While this is an ingestion point for untrusted data, the skill includes specific quality checks and anti-patterns to prevent ambiguity and ensure the resolved data matches the user's intent, minimizing the risk of instruction injection via data fields.
Audit Metadata