smart-money-signal-copy-trade
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with the
onchainosCLI (a tool for blockchain operations) usingsubprocess.runinbot.pyandrisk_check.py. These commands are used for legitimate purposes such as fetching market data, checking wallet balances, and executing trades within the agent's environment. - [EXTERNAL_DOWNLOADS]: The bot retrieves market signals via the
onchainos signal listcommand. This data is essential for the copy-trading functionality and is subjected to rigorous validation through a 15-check safety system before any action is taken. - [REMOTE_CODE_EXECUTION]: The bot uses
importlib.reloadto support hot-reloading of theconfig.pyfile. This allows users to update trading parameters (e.g., stop-loss levels, position sizes) without restarting the process. This dynamic execution is confined to the local configuration file. - [DATA_EXFILTRATION]: Position data and trade history are persisted locally in
positions.jsonandsignal_trades.json. The bot hosts a local web dashboard on port 3248 for user monitoring, but does not transmit sensitive information to external third-party domains.
Audit Metadata