tracking-crypto-portfolio
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill fetches live price data from the public CoinGecko API (referenced in SKILL.md/ARD and implemented in scripts/price_fetcher.py), and those external prices are ingested and directly drive valuations, allocations, and risk-flag decisions, so untrusted third‑party data can materially influence the agent's outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata