coincap
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions describe legitimate functionality for cryptocurrency market analysis using the CoinCap API. No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscation were detected.
- [COMMAND_EXECUTION]: The skill utilizes the 'x' command, which is the primary tool manager for the author (x-cmd). The provided examples are limited to market data retrieval and tool configuration and do not involve arbitrary or dangerous shell execution.
- [CREDENTIALS_UNSAFE]: The skill references API keys but follows security best practices by instructing users to configure them through a dedicated initialization command ('x coincap init') rather than requesting sensitive data through prompt injection or hardcoding secrets.
Audit Metadata