tracking-crypto-prices
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves real-time and historical market data from established and well-known services, specifically the CoinGecko API (
api.coingecko.com) and Yahoo Finance (via theyfinancelibrary). These network operations are intrinsic to the skill's primary function and target trusted data providers. - [COMMAND_EXECUTION]: The skill executes local Python scripts to orchestrate data retrieval, processing, and output formatting. The execution is limited to the skill's own distributed scripts, and no patterns of dynamic code execution from remote or untrusted sources were detected.
- [SAFE]: The skill follows security best practices, such as using
yaml.safe_load()for configuration parsing and providing a placeholder mechanism (${COINGECKO_API_KEY}) for API credentials rather than hardcoding secrets. The implementation of a thread-safe local caching system for market data further demonstrates a secure and efficient design. No evidence of prompt injection, obfuscation, or data exfiltration was found.
Audit Metadata