moonpay-discover-tokens
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied queries and external market data without explicit boundary markers or sanitization, creating a potential surface for indirect prompt injection.
- Ingestion points: User-provided query strings in
mp token searchand market data retrieved viamp token retrieve(SKILL.md). - Boundary markers: No delimiters or 'ignore embedded instructions' warnings are specified for the data interpolation.
- Capability inventory: The skill utilizes the
mpCLI tool to interact with blockchain data and present market analyses. - Sanitization: The instructions do not specify any validation or filtering of the content retrieved from external token metadata.
Audit Metadata