scanning-market-movers

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill operates as described, fetching market data from a well-known public API (CoinGecko) and presenting it to the user. All filesystem and network operations are aligned with its intended purpose.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to its ingestion of external data from the CoinGecko API which is later processed and displayed. This is an inherent property of the skill's data-fetching functionality. 1. Ingestion point: scripts/analyzer.py (CoinGecko markets API). 2. Boundary markers: None. 3. Capability inventory: File writing via scripts/scanner.py and execution via Bash(python:*). 4. Sanitization: No specific filtering for instructions in API strings is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 07:00 AM