smart-money-signal-copy-trade
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The bot interacts with the blockchain via the
onchainosCLI usingsubprocess.run. These calls are executed using a list of arguments, which prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill requires the
onchainosCLI tool to be pre-installed on the system. This is an official tool from the same ecosystem (okx) used for secure transaction signing and market data retrieval. - [SAFE]: The bot implements comprehensive risk controls, including liquidity checks, developer rug-pull history verification, and session-based stop-loss limits, demonstrating a focus on user safety.
- [SAFE]: The integrated web dashboard runs locally on
127.0.0.1:3248and is used solely for real-time monitoring of trades and signals without exposing any remote control capabilities.
Audit Metadata