find-next-crypto-idea
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bash commands for telemetry management and logging within the
~/.superstack/directory.\n- [DATA_EXFILTRATION]: The skill transmits platform and session information to a remote endpoint viacurl. This telemetry is only active if the user opts in during the skill's initial setup.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing and using thebird.fastpackage from NPM for data collection from social media platforms.\n- [PROMPT_INJECTION]: The skill processes untrusted data from the web (X, GitHub, blogs) which presents an indirect prompt injection surface.\n - Ingestion points: Research output from
live_research.pyand data fetched from the Helius blog.\n - Boundary markers: None identified in the instructions to separate external data from agent commands.\n
- Capability inventory: Access to
curl,bash, andpython3for script execution.\n - Sanitization: The use of
textContentin the HTML report generator provides mitigation against cross-site scripting (XSS) in generated reports.
Audit Metadata