iran-crypto
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
iran-crypto-mcppackage using theuvxtool. This package is authored by the same developer as the skill, representing a standard installation of its functional components from a public registry. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from multiple third-party cryptocurrency exchanges, which represents a potential surface for indirect prompt injection.
- Ingestion points: Public market data, order books, and trade history fetched from exchange APIs such as Nobitex, Wallex, Bitpin, Ramzinex, Tabdeal, OMPFinex, and Exir.
- Boundary markers: No specific delimiters or warnings are defined to distinguish external market data from agent instructions.
- Capability inventory: The tools are described as read-only; the skill does not include capabilities for file system modification, credential access, or arbitrary command execution.
- Sanitization: No explicit sanitization or verification of the fetched external data is mentioned in the skill instructions.
Audit Metadata