smart-money-signal-copy-trade
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version information and installers for its dependencies (onchainos CLI) from the author's official GitHub repositories (okx). These operations include SHA256 integrity checks and follow the vendor's established infrastructure.
- [COMMAND_EXECUTION]: The main logic in
bot.pyandrisk_check.pyusessubprocess.runto interact with theonchainosCLI tool. These calls use argument lists rather than shell strings, which is a secure practice to prevent command injection. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data (Smart Money signals) to trigger trading actions. It mitigates potential risks through a multi-layer safety verification system (
pre_trade_checksinrisk_check.py), including honeypot detection, rug history analysis, and liquidity verification. - [DYNAMIC_EXECUTION]: The bot utilizes
importlib.reloadto hot-reloadconfig.py. This allows for runtime parameter adjustments without restarting the service and is restricted to the skill's local configuration file.
Audit Metadata