crypto-ta-analyzer
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests public third‑party price data (e.g., CoinGecko via the coingecko_get_historical_chart tool and the example urllib.request call, plus support for exchange APIs and Yahoo Finance) using scripts/data_converter.py and scripts/coingecko_converter.py, and the agent is expected to read and analyze that external data as part of its workflow, exposing it to untrusted public content that could carry indirect prompt injection.
Audit Metadata