pionex-market
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
@pionex/pionex-ai-kitpackage from the NPM registry as a global dependency. This is a vendor-owned resource associated with the author 'pionex-official'. - [COMMAND_EXECUTION]: The skill executes the
pionex-trade-clibinary to retrieve public market information such as order book depth, trade history, and price tickers. - [INDIRECT_PROMPT_INJECTION]: The skill has the following vulnerability surface properties:
- Ingestion points: Market data (tickers, klines, order books) retrieved via
pionex-trade-clicommand output. - Boundary markers: Absent; there are no specific instructions to the agent to treat this data as untrusted or to use specific delimiters.
- Capability inventory: The agent has the ability to execute shell commands using the
pionex-trade-clitool. - Sanitization: No sanitization or validation of the market data is performed before it is presented to the agent's context.
Audit Metadata