The Agent Skills Directory

[SAFE]: No security issues were detected. The skill's behavior matches its stated purpose of providing an interface for the Santiment API.
[EXTERNAL_DOWNLOADS]: The skill communicates with the official Santiment GraphQL API at https://api.santiment.net/graphql. This is the legitimate endpoint for the service described and is documented neutrally as the primary data source.
[PROMPT_INJECTION]: A static detector hint regarding the concealment of actions was reviewed. The instructions in SKILL.md recommend saving large API responses to a file rather than piping them through stdin to avoid buffer issues. This is a technical optimization for handling large datasets and does not represent an attempt to hide malicious activity from the user.
[CREDENTIALS_UNSAFE]: The skill requires a SANTIMENT_API_KEY. It correctly instructs the user to provide their own key via environment variables and uses it in the standard Authorization header without hardcoding secrets or exposing them to unauthorized endpoints.

santiment-api