smart-money-signal-copy-trade

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill interfaces with the onchainos CLI (a tool for blockchain operations) using subprocess.run in bot.py and risk_check.py. These commands are used for legitimate purposes such as fetching market data, checking wallet balances, and executing trades within the agent's environment.
  • [EXTERNAL_DOWNLOADS]: The bot retrieves market signals via the onchainos signal list command. This data is essential for the copy-trading functionality and is subjected to rigorous validation through a 15-check safety system before any action is taken.
  • [REMOTE_CODE_EXECUTION]: The bot uses importlib.reload to support hot-reloading of the config.py file. This allows users to update trading parameters (e.g., stop-loss levels, position sizes) without restarting the process. This dynamic execution is confined to the local configuration file.
  • [DATA_EXFILTRATION]: Position data and trade history are persisted locally in positions.json and signal_trades.json. The bot hosts a local web dashboard on port 3248 for user monitoring, but does not transmit sensitive information to external third-party domains.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 02:26 PM