crypto-market-intel
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Scripts fetch market data from public endpoints at api.coingecko.com, api.llama.fi, and api.alternative.me. These are well-known cryptocurrency data services used for the skill's core functionality.- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The scripts only process user-provided token identifiers and market parameters to fetch public pricing information.- [SAFE]: The implementation relies exclusively on the Python standard library, avoiding third-party dependency risks. There is no evidence of obfuscation or hidden logic.- [PROMPT_INJECTION]: Indirect injection risk via external API data is handled through structural parsing: 1. Ingestion points: API responses in all script files. 2. Boundary markers: Data is returned in script-defined JSON schemas. 3. Capability inventory: No dangerous tools (file system, subprocess, or shell access) are requested. 4. Sanitization: Scripts perform explicit key extraction from API responses, preventing raw untrusted data from directly influencing the agent's context.
Audit Metadata