milligold
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install or configure the
milligold-mcppackage using theuvxtool. This is a standard procedure for adding MCP capabilities to an agent. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (Milli.gold APIs) to provide gold prices and statistics. While this creates a data ingestion surface, the risk is minimal as the tools are read-only and handle structured financial data.
- Ingestion points: Data is fetched from Milli.gold's undocumented site APIs via the
mg_get_price,mg_price_history, andmg_platform_statstools. - Boundary markers: No explicit delimiters are defined for the returned API data.
- Capability inventory: The tools are restricted to read-only operations for price and statistics retrieval.
- Sanitization: No specific sanitization logic is described for the API responses.
Audit Metadata