skills/sepehr071/iran-mcp/iran-crypto/Gen Agent Trust Hub

iran-crypto

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the iran-crypto-mcp package using the uvx tool. This package is authored by the same developer as the skill, representing a standard installation of its functional components from a public registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from multiple third-party cryptocurrency exchanges, which represents a potential surface for indirect prompt injection.
  • Ingestion points: Public market data, order books, and trade history fetched from exchange APIs such as Nobitex, Wallex, Bitpin, Ramzinex, Tabdeal, OMPFinex, and Exir.
  • Boundary markers: No specific delimiters or warnings are defined to distinguish external market data from agent instructions.
  • Capability inventory: The tools are described as read-only; the skill does not include capabilities for file system modification, credential access, or arbitrary command execution.
  • Sanitization: No explicit sanitization or verification of the fetched external data is mentioned in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM