monitoring-whale-activity
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill retrieves data from well-known and reputable cryptocurrency services, including Whale Alert (whale-alert.io), CoinGecko (coingecko.com), and Etherscan (etherscan.io). These integrations are documented and represent the core functionality of the skill.\n- [SAFE]: Local state management, including transaction caches and wallet watchlists, is handled through files in the user's home directory (e.g.,
~/.whale_watchlist.json). This is standard behavior for maintaining user preferences and reducing API load through caching.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external blockchain APIs. While this constitutes an attack surface for indirect prompt injection, the risk is negligible as the data consists primarily of structured transaction hashes and wallet addresses processed by a specialized CLI tool.\n- [COMMAND_EXECUTION]: The skill utilizes a set of Python scripts for its operations. Execution is scoped to scripts matching the*whale*pattern as specified in the platform's tool restrictions, ensuring the agent operates within the intended functional boundaries.
Audit Metadata