coinstats-coins
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the 'coinstats-cli' Node.js package. This is a legitimate tool provided by the author, CoinStatsHQ, to facilitate interaction with their API.
- [COMMAND_EXECUTION]: The skill restricts command execution to the 'coinstats' binary. This ensures the agent can only perform intended actions related to coin market data without access to arbitrary system commands.
- [CREDENTIALS_UNSAFE]: The skill uses an environment variable (COINSTATS_API_KEY) for authentication. No hardcoded secrets or sensitive keys were found in the skill's source code.
Audit Metadata