@1997/coinglass
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with official Coinglass API domains (open-api.coinglass.com and open-api-v4.coinglass.com) to fetch real-time and historical market data. These are well-known services appropriate for the skill's functionality.\n- [CREDENTIALS_UNSAFE]: The skill implements best practices for secret management by requiring the COINGLASS_API_KEY environment variable for authentication instead of hardcoding API keys in the source code.\n- [COMMAND_EXECUTION]: Analysis of the Python tool implementations confirms there are no attempts to execute system commands, spawn subprocesses, or perform any dangerous host-level operations.\n- [DATA_EXFILTRATION]: Outbound data is limited to sending necessary query parameters (such as ticker symbols, intervals, and exchange names) to the official Coinglass API to retrieve data. No sensitive local files or configurations are accessed or transmitted.
Audit Metadata