Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward CoinMarketCap exchange API reference skill with documented read-only API examples and no hidden execution or persistence behavior.
Installers should treat their CoinMarketCap API key as sensitive: avoid pasting real keys into shared logs, committed scripts, or chat transcripts, and prefer environment variables or a secret manager when running the curl examples. The skill otherwise appears to be read-only API documentation.
This markdown file includes curl examples that send an API credential via the X-CMC_PRO_API_KEY header, which is a privacy- and security-relevant behavior for markdown under the missing user warnings rule. The document does not include any warning about protecting API keys, avoiding shell history leakage, or using secure secret storage when running the examples.
This is a markdown file, so missing-warning checks apply to documented behaviors. The examples instruct users to send an X-CMC_PRO_API_KEY credential but do not warn users to keep the key secret, avoid committing it to shell history/scripts, or use secure environment-variable handling.
This markdown file includes curl examples that send an X-CMC_PRO_API_KEY header, which is a credential-bearing network operation. The page does not include any warning or note reminding users to protect API keys, avoid committing them, or use secure secret storage, so the behavior lacks user disclosure under the markdown warning criterion.
This markdown file includes curl examples that send an X-CMC_PRO_API_KEY header, which is a credential-bearing network operation. The document does not include any warning or note reminding users to protect API keys, avoid sharing command history, or use secure storage, so the examples lack user-facing disclosure about credential sensitivity.
No suspicious patterns detected.
