cryptofeed
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's runtime explicitly connects to public exchange WebSocket/REST endpoints (e.g., Binance, Coinbase, Kraken shown in SKILL.md and references/README.md) and ingests live market data that the agent is expected to read and use to drive feed handlers, NBBO aggregation, and backend actions, so untrusted third‑party data can materially influence behavior.
Audit Metadata