@1826/nigeria-p2p-arb
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to fetch market data and news updates.
- Network operations: It communicates with
p2p.binance.com,api.coingecko.com, andexchangerate-api.com. While Binance and CoinGecko are well-known services, the use of external APIs for data fetching is a standard capability for this skill's purpose. No sensitive file access or credential exposure was detected in association with these network calls. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data ingestion patterns.
- Ingestion points: Untrusted data enters the agent's context through
web_searchresults (Step 5) and Binance P2P API responses (Step 2). - Boundary markers: The skill does not implement explicit boundary markers or instructions to disregard potential commands embedded within retrieved news articles or API payloads.
- Capability inventory: The agent has the capability to read
walletbalances to provide trade suggestions based on user holdings. - Sanitization: There is no evidence of sanitization or filtering of the content retrieved from web searches before it is presented to the user or used to generate the report.
Audit Metadata