@349/starchild-strategies
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious behavior, obfuscation, or sensitive data access was detected. The skill uses local strategy templates and trusted public APIs. The author 'Star Child' and the skill name are consistent with vendor resource patterns mentioned in the context.- [EXTERNAL_DOWNLOADS]: Market data is fetched from CoinGecko's public API (api.coingecko.com) using the Python requests library. This is a well-known service for financial data.- [COMMAND_EXECUTION]: The skill uses local Python scripts (backtest.py, configure.py, market_scan.py, risk_calc.py) to perform mathematical simulations and configuration tasks. These scripts rely on standard scientific libraries like pandas and numpy.- [PROMPT_INJECTION]: Indirect surface via CoinGecko API data ingestion. Ingestion points: scripts/market_scan.py fetches numeric price data from the CoinGecko API. Boundary markers: The API response is parsed into structured formats (JSON, Pandas DataFrames) before use in calculations. Capability inventory: Local file writing for configuration and network access for price updates. Sanitization: External data is strictly numeric and used only for mathematical calculations, not for prompt construction.
Audit Metadata