cryptocurrency-trader
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The script
llm_trading_assistant.pyprovides a conversational interface that ingests untrusted user messages and incorporates them into prompts sent to external LLM services. It lacks explicit boundary markers or sanitization for this input. Evidence: Ingestion point inchat(user_message); Boundary markers are absent in the prompt construction; Capabilities include read-only market analysis; Sanitization is absent. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
ccxtlibrary to fetch real-time OHLCV market data from major established cryptocurrency exchanges (e.g., Binance, Coinbase, Kraken). This connection to well-known services is a fundamental requirement for the skill's analytical functions and is documented as expected behavior.
Audit Metadata