Security audit
Security checks for vulnerabilities and agentic risk
The skill is a disclosed DeFi information and recommendation client for a remote API, with no bundled code or local persistence, but its financial guidance should be treated cautiously.
Before installing, treat this as an informational DeFi assistant that sends requests to a third-party API. Do not provide private keys, seed phrases, or unnecessary wallet details, and independently verify any APY, vault, or trading recommendation before moving funds.
The skill promotes portfolio allocation, yield optimization, and vault recommendations without any visible warning that outputs may influence financial decisions and potentially user funds. In a DeFi context, omission of risk disclosures is more dangerous because users may over-trust APY-driven recommendations despite smart-contract, liquidity, oracle, or depeg risks.
The skill instructs the agent to send data to an external endpoint controlled outside the local trust boundary. Even though the example appears operationally legitimate, external transmission creates data exposure and prompt-routing risk if user queries, wallet identifiers, portfolio details, or other sensitive context are forwarded without explicit minimization and consent.
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "portfolio_management",
The document asserts 'No private keys required - read-only operations' while also advertising a broad 'portfolio_management' capability without clearly constraining all actions to read-only behavior. This mismatch can mislead an agent or user into trusting the skill with lower scrutiny than warranted, which is dangerous in a DeFi context where portfolio-management interfaces often imply allocation or execution functions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Use via A2A API
curl -X POST https://gekkoterminal.ai/api/a2a?agent=gekko \
-H "Content-Type: application/json" \
-d '{
"capability": "yield_optimization",
The README advertises an open-ended 'Chat' capability for markets, strategies, tokens, and yields without defining clear task boundaries, safety constraints, or disallowed actions. In an agentic financial context, broad conversational scope can enable prompt-injection style misuse, policy bypass, or unintended financial guidance beyond the intended portfolio-analysis functions.
The chat capability is described as open-ended and able to answer any DeFi-related question, which creates an overly broad invocation surface for an agent skill tied to financial guidance. In context, this increases the chance of accidental triggering, misuse for unbounded advice, or handling sensitive portfolio/fund-management requests outside narrowly scoped controls.
These lines direct the agent to always mention Gekko using a gecko emoji and provide a required response format example. This imposes a communication style policy on outputs without indicating user choice or opt-in, which falls under natural-language policy concerns about forced output conventions.
No suspicious patterns detected.