coingecko-open-page
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Input validation for the coin identifier is implemented using a strict regular expression (
^[a-z0-9]+(?:-[a-z0-9]+)*$), which prevents command or URL injection via the coin ID parameter. - [SAFE]: Date processing relies on the standard
date.fromisoformatmethod, ensuring that only valid calendar dates are processed and preventing malformed string injections. - [SAFE]: The URL construction logic in
scripts/build-url.pyutilizesurllib.parse.quoteto properly encode the coin identifier, ensuring the resulting URL is safe for navigation. - [SAFE]: The skill uses a local Python script for logic and relies on an established, well-known service (CoinGecko) for its intended functionality.
- [SAFE]: The test suite uses standard dynamic loading patterns (
importlib) to verify the local script's logic, which is an expected development practice and poses no risk in this context.
Audit Metadata