scorpion-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/scorpion_config.pyusessubprocess.runto call themcporterCLI. This is the platform's standard interface for executing trading actions and retrieving market data. All tool names (e.g., 'create_position') are hardcoded strings, and arguments are safely JSON-encoded. - [DATA_EXFILTRATION]: Sensitive identifiers such as wallet addresses and Telegram chat IDs are handled via environment variables and local configuration files with no evidence of external transmission to unauthorized domains.
- [REMOTE_CODE_EXECUTION]: No remote script downloads or dynamic execution of untrusted content were identified. All logic is contained within the skill's distributed scripts.
- [CREDENTIALS_UNSAFE]: The skill utilizes placeholders and environment variables for sensitive configuration, following best practices for credential management in a trading environment.
Audit Metadata