CoinGlass API SKILL

• Outcome: Pass
• Latest audit: Sep 15, 2026 · 1:42 AM UTC
• Version: 1.1.0

Overview

This skill is a documentation-only CoinGlass API helper that routes user requests to market-data endpoints and does not show hidden execution, persistence, or data-changing behavior.

Install only if you intend to let your agent call CoinGlass API endpoints. Provide the API key through a secure secret mechanism when possible, avoid hardcoding it in prompts or files, and treat returned news/article HTML as untrusted content rather than instructions.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (174)

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · account/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API                 | Endpoint                       | Function                                                                                                                                 |
| ------------------- | ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------- |
| Account Level Query | /api/user/account/subscription | This endpoint retrieves the user's account subscription details, including the current API tier, expiration time, and expiration status. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/bitcoin-etf/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/bitcoin-etf/API.md (reported line 24)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/bitcoin-etf/API.md (reported line 26)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · indic/other/API.md (reported line 29)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · indic/other/API.md (reported line 30)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/bitcoin-etf/API.md (reported line 25)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |
| ETF Premium/Discount History | /api/etf/bitcoin/premium-discount/history | This endpoint provides hist
...[truncated 25 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · indic/other/API.md (reported line 36)May include surrounding context.

md

| API                          | Endpoint                                  | Function                                                                                                                                                                                                                                     |
| ---------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Bitcoin ETF List             | /api/etf/bitcoin/list                     | This endpoint provides a list of key status information for Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| Hong Kong ETF Flows History  | /api/hk-etf/bitcoin/flow-history          | This endpoint provides historical data on ETF flow activity for Bitcoin ETFs in the Hong Kong market.                                                                                                                                        |
| ETF NetAssets History        | /api/etf/bitcoin/net-assets/history       | This endpoint provides historical data on the net assets of Bitcoin Exchange-Traded Funds (ETFs).                                                                                                                                            |
| ETF Flows History            | /api/etf/bitcoin/flow-history             | This endpoint provides historical flow data for Bitcoin Exchange-Traded Funds (ETFs), including daily net inflows and outflows in USD, closing prices, and flow breakdowns by individual ETF tickers.                                        |
| ETF Premium/Discount History | /api/etf/bitcoin/premium-discount/history | This endpoint provides hist
...[truncated 25 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/bitcoin-etf/API.md (reported line 31)May include surrounding context.

md

| ETF Premium/Discount History | /api/etf/bitcoin/premium-discount/history | This endpoint provides historical data on the premium or discount rates of Bitcoin Exchange-Traded Funds (ETFs), including Net Asset Value (NAV), market price, and premium/discount percentages for each ETF ticker.                        |
| ETF History                  | /api/etf/bitcoin/history                  | This endpoint provides historical data for Bitcoin Exchange-Traded Funds (ETFs), including key information such as market price, Net Asset Value (NAV), premium/discount percentage, shares outstanding, and net assets for each ETF ticker. |
| ETF Price History            | /api/etf/bitcoin/price/history            | This endpoint provides historical price data for Bitcoin Exchange-Traded Funds (ETFs), including open, high, low, and close (OHLC) prices, along with trading volume for each data point.                                                    |
| ETF Detail                   | /api/etf/bitcoin/detail                   | This endpoint provides detailed information on a Bitcoin Exchange-Traded Fund (ETF), including its key attributes and status.                                                                                                                |
| ETF AUM                      | /api/etf/bitcoin/aum                      | This endpoint provides historical Assets Under Management (AUM) data for Bitcoin ETFs                                                                                                                                                        |

## Rate Limits

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/order-book-l2/API.md (reported line 233)May include surrounding context.

md

| ETF Premium/Discount History | /api/etf/bitcoin/premium-discount/history | This endpoint provides historical data on the premium or discount rates of Bitcoin Exchange-Traded Funds (ETFs), including Net Asset Value (NAV), market price, and premium/discount percentages for each ETF ticker.                        |
| ETF History                  | /api/etf/bitcoin/history                  | This endpoint provides historical data for Bitcoin Exchange-Traded Funds (ETFs), including key information such as market price, Net Asset Value (NAV), premium/discount percentage, shares outstanding, and net assets for each ETF ticker. |
| ETF Price History            | /api/etf/bitcoin/price/history            | This endpoint provides historical price data for Bitcoin Exchange-Traded Funds (ETFs), including open, high, low, and close (OHLC) prices, along with trading volume for each data point.                                                    |
| ETF Detail                   | /api/etf/bitcoin/detail                   | This endpoint provides detailed information on a Bitcoin Exchange-Traded Fund (ETF), including its key attributes and status.                                                                                                                |
| ETF AUM                      | /api/etf/bitcoin/aum                      | This endpoint provides historical Assets Under Management (AUM) data for Bitcoin ETFs                                                                                                                                                        |

## Rate Limits

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · indic/futures/API.md (reported line 33)May include surrounding context.

md

| ETF Premium/Discount History | /api/etf/bitcoin/premium-discount/history | This endpoint provides historical data on the premium or discount rates of Bitcoin Exchange-Traded Funds (ETFs), including Net Asset Value (NAV), market price, and premium/discount percentages for each ETF ticker.                        |
| ETF History                  | /api/etf/bitcoin/history                  | This endpoint provides historical data for Bitcoin Exchange-Traded Funds (ETFs), including key information such as market price, Net Asset Value (NAV), premium/discount percentage, shares outstanding, and net assets for each ETF ticker. |
| ETF Price History            | /api/etf/bitcoin/price/history            | This endpoint provides historical price data for Bitcoin Exchange-Traded Funds (ETFs), including open, high, low, and close (OHLC) prices, along with trading volume for each data point.                                                    |
| ETF Detail                   | /api/etf/bitcoin/detail                   | This endpoint provides detailed information on a Bitcoin Exchange-Traded Fund (ETF), including its key attributes and status.                                                                                                                |
| ETF AUM                      | /api/etf/bitcoin/aum                      | This endpoint provides historical Assets Under Management (AUM) data for Bitcoin ETFs                                                                                                                                                        |

## Rate Limits

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The documentation instructs users to send a secret API key in outbound HTTP requests to an external service, but it does not include any warning about credential sensitivity, storage, logging, or transmission risk. In an agent skill context, this can lead to accidental exposure of the key in chat transcripts, debug logs, screenshots, shell history, or downstream tooling, especially if users copy examples verbatim.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/ethereum-etf/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API                   | Endpoint                             | Function                                                                                           |
| --------------------- | ------------------------------------ | -------------------------------------------------------------------------------------------------- |
| ETF NetAssets History | /api/etf/ethereum/net-assets/history | This endpoint provides historical net assets data for Ethereum-based Exchange-Traded Funds (ETFs). |
| Ethereum ETF List     | /api/etf/ethereum/list               | This endpoint provides a list of key status information for Ethereum Exchange-Traded Funds (ETFs). |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/grayscale/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API             | Endpoint                       | Function                                                                                                       |
| --------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Holdings List   | /api/grayscale/holdings-list   | This endpoint provides a list of holdings managed by Grayscale Investments.                                    |
| Premium History | /api/grayscale/premium-history | This endpoint provides historical premium/discount data for Grayscale Investment Trusts relative to their NAV. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/open-interest/API.md (reported line 80)May include surrounding context.

md

## Quick Reference

| API             | Endpoint                       | Function                                                                                                       |
| --------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Holdings List   | /api/grayscale/holdings-list   | This endpoint provides a list of holdings managed by Grayscale Investments.                                    |
| Premium History | /api/grayscale/premium-history | This endpoint provides historical premium/discount data for Grayscale Investment Trusts relative to their NAV. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/taker-buy-sell/API.md (reported line 325)May include surrounding context.

md

## Quick Reference

| API             | Endpoint                       | Function                                                                                                       |
| --------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Holdings List   | /api/grayscale/holdings-list   | This endpoint provides a list of holdings managed by Grayscale Investments.                                    |
| Premium History | /api/grayscale/premium-history | This endpoint provides historical premium/discount data for Grayscale Investment Trusts relative to their NAV. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/trading-market/API.md (reported line 604)May include surrounding context.

md

## Quick Reference

| API             | Endpoint                       | Function                                                                                                       |
| --------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Holdings List   | /api/grayscale/holdings-list   | This endpoint provides a list of holdings managed by Grayscale Investments.                                    |
| Premium History | /api/grayscale/premium-history | This endpoint provides historical premium/discount data for Grayscale Investment Trusts relative to their NAV. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · spots/taker-buy-sell/API.md (reported line 329)May include surrounding context.

md

## Quick Reference

| API             | Endpoint                       | Function                                                                                                       |
| --------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Holdings List   | /api/grayscale/holdings-list   | This endpoint provides a list of holdings managed by Grayscale Investments.                                    |
| Premium History | /api/grayscale/premium-history | This endpoint provides historical premium/discount data for Grayscale Investment Trusts relative to their NAV. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/solana-etf/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API               | Endpoint                  | Function                                                                                    |
| ----------------- | ------------------------- | ------------------------------------------------------------------------------------------- |
| ETF Flows History | /api/etf/xrp/flow-history | This endpoint provides a list of key status information regarding the history of ETF flows. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · etf/xrp-etf/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API               | Endpoint                  | Function                                                                                    |
| ----------------- | ------------------------- | ------------------------------------------------------------------------------------------- |
| ETF Flows History | /api/etf/xrp/flow-history | This endpoint provides a list of key status information regarding the history of ETF flows. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/funding-rate/API.md (reported line 22)May include surrounding context.

md

## Quick Reference

| API                       | Endpoint                                            | Function                                                                                                                                          |
| ------------------------- | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| History (OHLC)            | /api/futures/funding-rate/history                   | This endpoint provides funding rate data in OHLC (open, high, low, close) candlestick format for futures trading pairs.                           |
| OI Weight History (OHLC)  | /api/futures/funding-rate/oi-weight-history         | This endpoint provides open interest-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/hyperliquid-positions/API.md (reported line 550)May include surrounding context.

md

## Quick Reference

| API                       | Endpoint                                            | Function                                                                                                                                          |
| ------------------------- | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| History (OHLC)            | /api/futures/funding-rate/history                   | This endpoint provides funding rate data in OHLC (open, high, low, close) candlestick format for futures trading pairs.                           |
| OI Weight History (OHLC)  | /api/futures/funding-rate/oi-weight-history         | This endpoint provides open interest-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · indic/other/API.md (reported line 32)May include surrounding context.

md

## Quick Reference

| API                       | Endpoint                                            | Function                                                                                                                                          |
| ------------------------- | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| History (OHLC)            | /api/futures/funding-rate/history                   | This endpoint provides funding rate data in OHLC (open, high, low, close) candlestick format for futures trading pairs.                           |
| OI Weight History (OHLC)  | /api/futures/funding-rate/oi-weight-history         | This endpoint provides open interest-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies. |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/funding-rate/API.md (reported line 27)May include surrounding context.

md

| History (OHLC)            | /api/futures/funding-rate/history                   | This endpoint provides funding rate data in OHLC (open, high, low, close) candlestick format for futures trading pairs.                           |
| OI Weight History (OHLC)  | /api/futures/funding-rate/oi-weight-history         | This endpoint provides open interest-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies. |
| Vol Weight History (OHLC) | /api/futures/funding-rate/vol-weight-history        | This endpoint provides volume-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies.        |
| Exchange List             | /api/futures/funding-rate/exchange-list             | This endpoint provides funding rate data from exchanges.                                                                                          |
| Cumulative Exchange List  | /api/futures/funding-rate/accumulated-exchange-list | This endpoint provides cumulative funding rate data from exchanges.                                                                               |
| Arbitrage                 | /api/futures/funding-rate/arbitrage                 | This endpoint provides funding rate arbitrage data across exchanges for futures cryptocurrencies.                                                 |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · futures/order-book-l2/API.md (reported line 79)May include surrounding context.

md

| History (OHLC)            | /api/futures/funding-rate/history                   | This endpoint provides funding rate data in OHLC (open, high, low, close) candlestick format for futures trading pairs.                           |
| OI Weight History (OHLC)  | /api/futures/funding-rate/oi-weight-history         | This endpoint provides open interest-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies. |
| Vol Weight History (OHLC) | /api/futures/funding-rate/vol-weight-history        | This endpoint provides volume-weighted funding rate data in OHLC (open, high, low, close) candlestick format for futures cryptocurrencies.        |
| Exchange List             | /api/futures/funding-rate/exchange-list             | This endpoint provides funding rate data from exchanges.                                                                                          |
| Cumulative Exchange List  | /api/futures/funding-rate/accumulated-exchange-list | This endpoint provides cumulative funding rate data from exchanges.                                                                               |
| Arbitrage                 | /api/futures/funding-rate/arbitrage                 | This endpoint provides funding rate arbitrage data across exchanges for futures cryptocurrencies.                                                 |

Static analysis

No suspicious patterns detected.