starter-coach
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
llm_strategy.pyscript attempts to read the local Anthropic credentials file located at~/.claude/.credentials.jsonto extract anaccessTokenfor its operations.- [DYNAMIC_EXECUTION]: The skill uses a template-based approach to generate a complete Python bot script ({name}_bot.py) at runtime, incorporating user profile data and strategy specifications.- [COMMAND_EXECUTION]: Thecoach.pyscript verifies the generated bot script by executing it usingsubprocess.run(['python3', filepath, '--smoke-test']), which runs locally generated code.- [COMMAND_EXECUTION]: The skill relies on theonchainosCLI tool, which is executed viasubprocess.runinonchainos.pyto handle all blockchain-related tasks including transactions.- [INDIRECT_PROMPT_INJECTION]: The skill's strategy generation logic inllm_strategy.pytakes user-provided profile information and interpolates it into a prompt for an LLM to generate strategy code, representing an injection surface without explicit sanitization mechanisms.
Recommendations
- AI detected serious security threats
Audit Metadata