moonpay-buy-crypto
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
mpCLI to manage MoonPay accounts, list wallet addresses, and generate checkout flows for crypto purchases. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface where user-supplied inputs are interpolated into shell commands.
- Ingestion points: User-provided token codes, amounts, and wallet addresses are used in
SKILL.md. - Boundary markers: None are used to separate user input from the command structure.
- Capability inventory: Shell execution of the
mpCLI tool. - Sanitization: No explicit sanitization of input is provided; the skill relies on the agent to verify details before execution.
Audit Metadata