pp-coingecko
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install CLI tools from the vendor's official repositories on GitHub and NPM (@mvanhorn/printing-press-library and github.com/mvanhorn/printing-press-library).
- [COMMAND_EXECUTION]: Utilizes bash commands for tool installation and for executing cryptocurrency data queries via the coingecko-pp-cli binary.
- [DATA_EXFILTRATION]: Features a delivery mechanism that allows output to be sent to arbitrary external webhook URLs or written to files, creating a potential surface for data exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the public CoinGecko API and handles natural language capability queries, representing a surface for indirect prompt injection. 1. Ingestion points: Cryptocurrency data from the CoinGecko API and user natural language strings (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution, network requests via webhooks, and local file writing. 4. Sanitization: Not explicitly implemented in the skill instructions.
Audit Metadata