Galleon DeFi Market Snapshot

• Outcome: Pass
• Latest audit: Oct 9, 2026 · 9:20 AM UTC
• Version: 0.6.1

Overview

This skill is a bounded crypto market-data helper that makes disclosed public price API reads and shows no credential use, trading authority, persistence, or hidden behavior.

Install only if you are comfortable with the agent making public, keyless HTTPS requests to CoinGecko and DefiLlama for the asset IDs you ask about. Do not treat the returned aggregate prices as trade execution quotes, wallet balances, or investment advice; use official provider or venue tools for consequential financial decisions.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.

md

node scripts/market-data.mjs snapshot --ids bitcoin,ethereum

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 27)May include surrounding context.

md

node scripts/market-data.mjs snapshot --ids bitcoin,ethereum

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md

node scripts/market-data.mjs snapshot --ids bitcoin,ethereum

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/requests.md (reported line 14)May include surrounding context.

md

- `--max-age`: 1–86,400 seconds. Default 300; a provider observation more than 60 seconds in the future fails.
- `--max-skew`: 0–3,600 seconds. Default 120. Only aligned fresh rows get a numerical price spread.

CoinGecko uses the public `https://api.coingecko.com/api/v3/simple/price` endpoint with bounded IDs, USD and `include_last_updated_at=true`. DefiLlama uses `https://coins.llama.fi/prices/current/` with `coingecko:<id>` keys. There is at most one request per provider. No environment values are read.

The result includes `status` (`complete`, `partial`, `unavailable`), normalized parameters, `reads`, comparisons and limitations. `reads` retain provider/source, SHA-256 of successful raw bytes and row-level observations. A valid row includes a finite `priceUsd` from `1e-12` to `1e12`, exact identity, observed/retrieved ISO times and age. Missing, stale or malformed rows include `ok:false` and a stable error. Source URLs contain no credentials.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/market-data.mjs (reported line 75)May include surrounding context.

js

- `--max-age`: 1–86,400 seconds. Default 300; a provider observation more than 60 seconds in the future fails.
- `--max-skew`: 0–3,600 seconds. Default 120. Only aligned fresh rows get a numerical price spread.

CoinGecko uses the public `https://api.coingecko.com/api/v3/simple/price` endpoint with bounded IDs, USD and `include_last_updated_at=true`. DefiLlama uses `https://coins.llama.fi/prices/current/` with `coingecko:<id>` keys. There is at most one request per provider. No environment values are read.

The result includes `status` (`complete`, `partial`, `unavailable`), normalized parameters, `reads`, comparisons and limitations. `reads` retain provider/source, SHA-256 of successful raw bytes and row-level observations. A valid row includes a finite `priceUsd` from `1e-12` to `1e12`, exact identity, observed/retrieved ISO times and age. Missing, stale or malformed rows include `ok:false` and a stable error. Source URLs contain no credentials.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/market-data.mjs (reported line 117)May include surrounding context.

js

- `--max-age`: 1–86,400 seconds. Default 300; a provider observation more than 60 seconds in the future fails.
- `--max-skew`: 0–3,600 seconds. Default 120. Only aligned fresh rows get a numerical price spread.

CoinGecko uses the public `https://api.coingecko.com/api/v3/simple/price` endpoint with bounded IDs, USD and `include_last_updated_at=true`. DefiLlama uses `https://coins.llama.fi/prices/current/` with `coingecko:<id>` keys. There is at most one request per provider. No environment values are read.

The result includes `status` (`complete`, `partial`, `unavailable`), normalized parameters, `reads`, comparisons and limitations. `reads` retain provider/source, SHA-256 of successful raw bytes and row-level observations. A valid row includes a finite `priceUsd` from `1e-12` to `1e12`, exact identity, observed/retrieved ISO times and age. Missing, stale or malformed rows include `ok:false` and a stable error. Source URLs contain no credentials.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/market-data.mjs (reported line 123)May include surrounding context.

js

- `--max-age`: 1–86,400 seconds. Default 300; a provider observation more than 60 seconds in the future fails.
- `--max-skew`: 0–3,600 seconds. Default 120. Only aligned fresh rows get a numerical price spread.

CoinGecko uses the public `https://api.coingecko.com/api/v3/simple/price` endpoint with bounded IDs, USD and `include_last_updated_at=true`. DefiLlama uses `https://coins.llama.fi/prices/current/` with `coingecko:<id>` keys. There is at most one request per provider. No environment values are read.

The result includes `status` (`complete`, `partial`, `unavailable`), normalized parameters, `reads`, comparisons and limitations. `reads` retain provider/source, SHA-256 of successful raw bytes and row-level observations. A valid row includes a finite `priceUsd` from `1e-12` to `1e12`, exact identity, observed/retrieved ISO times and age. Missing, stale or malformed rows include `ok:false` and a stable error. Source URLs contain no credentials.

Static analysis

No suspicious patterns detected.