crypto-market
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests using
curlto an external server athttp://43.167.234.49:3101. This IP address is not a recognized well-known service or whitelisted domain.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of untrusted external news data via the/api/v2/crypto/news/endpoints. - Ingestion points: News data is ingested from external sources in
SKILL.md(via API calls). - Boundary markers: Absent; there are no instructions for the agent to distinguish between its core instructions and potentially malicious instructions embedded within the news content.
- Capability inventory: The skill has network access capabilities via
curl. - Sanitization: No evidence of content sanitization or validation of the retrieved news articles before they are presented to the agent context.
Audit Metadata