scanning-market-movers
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- CREDENTIALS_UNSAFE (HIGH): The file
references/implementation.mdprovides explicit instructions for the AI agent to load API credentials from{baseDir}/config/crypto-apis.env. Directing an AI to access secret-containing environment files increases the risk of credential leakage into conversational logs or context.\n- COMMAND_EXECUTION (MEDIUM): Thescripts/analyzer.pyfile uses dynamic path manipulation (sys.path.insert) to load modules from a path computed at runtime. This technique, when combined with the broadBash(python:*)permissions requested inSKILL.md, creates a potential vector for code execution if local paths are compromised.\n- EXTERNAL_DOWNLOADS (LOW): The skill documentation (SKILL.md) instructs the user or agent to install therequestsandpandaspackages via pip. These are standard libraries but constitute unverified external dependencies at the time of installation.\n- DATA_EXFILTRATION (LOW): The skill creates an attack surface for indirect prompt injection. Ingestion point: JSON response from CoinGecko API inscripts/analyzer.py. Boundary markers: None. Capability inventory:Bash,Write,Edit. Sanitization: No explicit sanitization of API data before processing or display.\n- SAFE (SAFE): No evidence of obfuscation, persistence mechanisms, or direct prompt injection (DAN/jailbreak) was found in the analyzed scripts or documentation.
Recommendations
- AI detected serious security threats
Audit Metadata