skills/sepehr071/iran-mcp/milligold/Gen Agent Trust Hub

milligold

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install or configure the milligold-mcp package using the uvx tool. This is a standard procedure for adding MCP capabilities to an agent.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (Milli.gold APIs) to provide gold prices and statistics. While this creates a data ingestion surface, the risk is minimal as the tools are read-only and handle structured financial data.
  • Ingestion points: Data is fetched from Milli.gold's undocumented site APIs via the mg_get_price, mg_price_history, and mg_platform_stats tools.
  • Boundary markers: No explicit delimiters are defined for the returned API data.
  • Capability inventory: The tools are restricted to read-only operations for price and statistics retrieval.
  • Sanitization: No specific sanitization logic is described for the API responses.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM