cryptocurrency-trader

User-provided trading pair symbols (e.g., 'BTC/USDT') are passed directly to exchange API calls and file operations without validation or sanitization. An attacker could inject malicious payloads through symbol parameters that could lead to command injection, path traversal, or API abuse. The skill accepts arbitrary symbol strings from command-line arguments and passes them to ccxt exchange methods.

skill.py

symbol = args.symbol (from command line) -> agent.comprehensive_analysis(symbol) -> exchange.fetch_ohlcv(symbol, ...) - No input validation or sanitization

The market scanner iterates through multiple cryptocurrency categories and symbols without rate limiting or resource bounds. The scan function can analyze 30+ symbols with multiple timeframes (15m, 1h, 4h) each, making hundreds of API calls. No timeout limits, no maximum scan duration, and minimal rate limiting (0.5s delay) could lead to resource exhaustion, API rate limit violations, or denial of service.

scripts/market/scanner.py

for category in categories: for symbol in symbols: analysis = agent.comprehensive_analysis(symbol) - Nested loops with minimal rate limiting, no timeout, no maximum iterations

The skill executes arbitrary Python code through multiple script files without any allowed-tools restrictions in SKILL.md. The YAML manifest does not specify allowed-tools, meaning the agent has unrestricted access to Python, Bash, file system operations, and network calls. This violates the principle of least privilege and creates significant attack surface.

SKILL.md

YAML frontmatter missing 'allowed-tools' field - No restrictions on Python execution, file access, or network calls