CoinMarketCap Crypto APIs

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  1.0.3

Overview

This is a documentation-only CoinMarketCap API reference skill with normal cautions around API keys and provider-specific routing.

Install this as CoinMarketCap-specific API documentation. Review generated curl commands before running them, use your own CoinMarketCap key through an environment variable or secret store where possible, avoid sharing real keys in prompts or logs, and be aware of provider quota or paid-plan credit usage.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger and description are broad enough to capture many generic crypto API or price-data requests, which can cause the agent to invoke this skill in situations where a more appropriate or neutral source should be used. This creates scope-overreach and routing risk: users asking broadly about crypto data could be steered into a vendor-specific skill, reducing relevance and potentially biasing responses.

VirusTotal

65/65 vendors flagged this skill as clean.