cli-coingecko

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill includes a directive to "skip the ai-coord gate," which is an instruction to bypass a system-level coordination control unrelated to the CoinGecko CLI functionality, i.e., a hidden/overriding instruction outside the skill's stated purpose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent to fetch live API documentation at https://docs.coingecko.com/llms.txt during runtime to determine behavior for unsupported endpoints, meaning remote content would directly control the agent's instructions.