tracking-crypto-portfolio
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches market data from the official CoinGecko API (api.coingecko.com) via the
PriceFetcherclass inprice_fetcher.py. This is a standard and expected operation for a valuation tool targeting a well-known service. - [COMMAND_EXECUTION]: The skill uses the Bash tool to execute its own Python logic (
portfolio_tracker.py). These commands are restricted to the skill's own environment and are used solely for data processing as described in the documentation. - [PROMPT_INJECTION]: The skill ingests untrusted data from user-supplied JSON files in
portfolio_loader.py. It mitigates potential risks by performing strict schema validation, including type-casting quantities to floats and symbols to uppercase strings. While it lacks explicit boundary markers in the final presentation, the risk is minimized by the structured parsing and limited execution scope of the processing engine.
Audit Metadata