crypto-research
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, such as cryptocurrency news headlines and project descriptions, which could potentially contain malicious instructions intended to manipulate the agent's output or behavior.
- Ingestion points: The agent ingests data from the
mcp__cmc-mcp__get_crypto_latest_news,mcp__cmc-mcp__get_crypto_info, andmcp__cmc-mcp__search_crypto_infotools as described inSKILL.md. - Boundary markers: The instructions do not define clear boundaries or delimiters to separate external data from system instructions, nor do they include explicit warnings for the agent to ignore instructions embedded in the fetched content.
- Capability inventory: The skill is restricted to read-only cryptocurrency data tools (
mcp__cmc-mcp__*). It does not have capabilities for file system modification, network exfiltration, or arbitrary command execution. - Sanitization: No sanitization, filtering, or validation of the external news or metadata is performed before the agent processes and summarizes the content.
Audit Metadata