crypto-analysis
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto retrieve real-time cryptocurrency market data (K-lines, funding rates, open interest, and account ratios) from Binance API endpoints. This is part of the core functionality defined inSKILL.mdand is used to populate technical analysis templates. - [EXTERNAL_DOWNLOADS]: Market data is fetched from
fapi.binance.com. This is the official API for Binance, a well-known technology and financial service. The downloads are handled according to the documented API requirements, including rate-limiting and retry logic. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, representing a potential ingestion surface.
- Ingestion points: Market data retrieved from Binance API endpoints (defined in
references/api-endpoints.md). - Boundary markers: The skill treats incoming data as structured JSON arrays or objects for mathematical calculation, reducing the likelihood of instruction-based injection, though no explicit delimiters for 'ignoring embedded instructions' are used.
- Capability inventory: Uses
curlfor data retrieval. The skill focuses on data calculation (EMA, RSI, MACD) and report generation. - Sanitization: Includes robust error handling for HTTP status codes (418/429) and JSON parsing errors, but lacks specific sanitization for the content of the data strings themselves.
Audit Metadata