coinstats-news
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'coinstats-cli' Node.js package, a verified vendor resource from coinstatshq.
- [PROMPT_INJECTION]: The skill retrieves external news data, creating a surface for indirect prompt injection. Ingestion points: News titles and descriptions from 'coinstats news' commands in SKILL.md. Boundary markers: None. Capability inventory: Execution of 'coinstats' CLI commands via Bash. Sanitization: None identified for processed news content.
Audit Metadata