scorpion-strategy

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/scorpion_config.py uses subprocess.run to call the mcporter CLI. This is the platform's standard interface for executing trading actions and retrieving market data. All tool names (e.g., 'create_position') are hardcoded strings, and arguments are safely JSON-encoded.
  • [DATA_EXFILTRATION]: Sensitive identifiers such as wallet addresses and Telegram chat IDs are handled via environment variables and local configuration files with no evidence of external transmission to unauthorized domains.
  • [REMOTE_CODE_EXECUTION]: No remote script downloads or dynamic execution of untrusted content were identified. All logic is contained within the skill's distributed scripts.
  • [CREDENTIALS_UNSAFE]: The skill utilizes placeholders and environment variables for sensitive configuration, following best practices for credential management in a trading environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 05:54 PM