stablecoin-market-brief
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a version check mechanism in
SKILL.mdthat fetches the latest version string fromraw.githubusercontent.com/okx/plugin-store. This is a read-only operation used for update notifications and does not perform automatic installations. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external API (
api.barker.money). While this is a potential attack surface for indirect prompt injection, the skill explicitly includes security instructions for the agent to treat API responses as untrusted data and avoid executing any embedded instructions. This effectively mitigates the risk. - [SAFE]: All network operations are limited to a single vendor-owned domain (
api.barker.money) for public market data and a known repository for version checks. No sensitive user data (keys, wallets, PII) is transmitted or accessed.
Audit Metadata