The Agent Skills Directory

[SAFE]: No security issues or malicious patterns were detected in the skill's instructions or configuration.
[COMMAND_EXECUTION]: The skill utilizes curl for interacting with the CoinGecko API. These commands are used for their intended purpose of fetching financial data and use shell-safe environment variables for authentication headers.
[EXTERNAL_DOWNLOADS]: The skill connects to api.coingecko.com and pro-api.coingecko.com, which are well-known technology services. It also references official documentation at docs.coingecko.com. These external references are legitimate and do not involve untrusted remote code execution.
[CREDENTIALS_UNSAFE]: The skill demonstrates best practices by instructing the agent to detect and use environment variables (COINGECKO_API_KEY, COINGECKO_PRO_API_KEY) rather than hardcoding sensitive credentials.
[PROMPT_INJECTION]: No evidence of prompt injection or bypass instructions was found. The guidance focuses on coin ID and platform resolution workflows.

coingecko-api