moonpay-price-alerts
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill uses
launchctl(macOS) andcrontab(Linux) to ensure price-checking scripts run at regular intervals. This persistence is the core mechanism for providing the advertised price alert functionality and is considered safe as it serves the primary intended purpose of the skill.- [COMMAND_EXECUTION]: The provided scripts execute local utilities such asmp,jq,osascript, andnotify-sendto perform price lookups and display notifications to the user. These commands are standard for the described operations.- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON data from thempcommand-line tool. It manages this ingestion point usingjqfor parsing and includes logic to sanitize the output through numerical comparisons before triggering system notifications.
Audit Metadata