coingecko-api 감사 보고서.

경고

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• No critical security risks found. The skill only makes HTTP requests to CoinGecko and performs local data analysis.
• External API data is printed directly; if this output is later consumed by an LLM, standard output sanitization should be considered.
• The SKILL.md frontmatter lists pandas and numpy as dependencies, but the Quick Start examples only use httpx. Scripts do require pandas/numpy, so this is correct overall but could be clearer.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

방법

이 보고서는 공개 메타데이터, AI 검토 결과, 저장소 최신성, 설치 준비 상태, OpenAgentSkill 이벤트, 품질 점수, 신뢰 검사와 Agent 안전 게이트를 결합합니다. 전체 소스 코드 보안 감사는 아닙니다.