assets
Warn
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides instructions for users to supply highly sensitive financial credentials, specifically the KuCoin API Key, API Secret, and Passphrase, by uploading a text file for the agent to read.
- [COMMAND_EXECUTION]: Technical reference documentation in
references/authentication.mdincludes executable Bash examples that utilizecurlandopensslfor network requests and HMAC-SHA256 signature computation. - [REMOTE_CODE_EXECUTION]: The authentication documentation includes Python code snippets using the
requestslibrary to transmit data and perform operations against the KuCoin API endpoints. - [SAFE]: All described network operations and API endpoints target the official and legitimate production domain of the service provider (
api.kucoin.com).
Audit Metadata