crypto-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source (CoinGecko API) and interpolates it directly into agent output.
- Ingestion points: External data is fetched from
https://api.coingecko.com/api/v3inscripts/crypto.pyvia theget_pricesandsearchfunctions. - Boundary markers: The skill lacks explicit boundary markers or instructions for the agent to ignore potentially malicious content embedded in the API response data (e.g., coin names or descriptions).
- Capability inventory: The script has capabilities to read and write to the local filesystem (
data/alerts.json) and perform network requests to the CoinGecko API. - Sanitization: There is minimal sanitization of the coin names or IDs returned by the API before they are printed to the console or stored in the local database.
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time cryptocurrency price and search data from
api.coingecko.com. This is an expected behavior for a cryptocurrency tracking utility and targets a well-known service domain.
Audit Metadata