coingecko-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflows (SKILL.md and references) explicitly call public CoinGecko endpoints (e.g., https://api.coingecko.com/api/v3/search?query=..., /coins/{id}, /simple/price and the fallback WebFetch to https://docs.coingecko.com/llms.txt) and instruct the agent to fetch and act on those live third-party responses (search results, coin metadata, images, and platform lists) which can directly influence subsequent queries and actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to WebFetch the external AI-friendly documentation at https://docs.coingecko.com/llms.txt at runtime to "retrieve this documentation for extended API capabilities", which is a runtime fetch of remote content that can modify agent behavior/instructions.