aibijia-price-comparison

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches HTML data from external websites to collect pricing information using standard libraries like requests and aiohttp.
  • [DATA_EXFILTRATION]: Aggregated price data is sent to the developer's API (aibijia.org) and configured Telegram channels. Credential handling for these services uses environment variables, which is a recommended security practice.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted third-party websites. * Ingestion points: TokenPriceScraper.fetch_page in SKILL.md (scrapes external URLs). * Boundary markers: Not explicitly used in the scraping logic. * Capability inventory: requests.post and bot.send_message are used to export the data. * Sanitization: Employs BeautifulSoup for structural parsing and numeric casting for price values, providing basic protection against malicious string inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 07:38 PM