@1826/nigeria-p2p-arb

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill performs network requests to fetch market data and news updates.
  • Network operations: It communicates with p2p.binance.com, api.coingecko.com, and exchangerate-api.com. While Binance and CoinGecko are well-known services, the use of external APIs for data fetching is a standard capability for this skill's purpose. No sensitive file access or credential exposure was detected in association with these network calls.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data ingestion patterns.
  • Ingestion points: Untrusted data enters the agent's context through web_search results (Step 5) and Binance P2P API responses (Step 2).
  • Boundary markers: The skill does not implement explicit boundary markers or instructions to disregard potential commands embedded within retrieved news articles or API payloads.
  • Capability inventory: The agent has the capability to read wallet balances to provide trade suggestions based on user holdings.
  • Sanitization: There is no evidence of sanitization or filtering of the content retrieved from web searches before it is presented to the user or used to generate the report.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 07:35 AM