Scanned skills

agiprolabs/claude-trading-skills whale-tracking

Checked the catalogued skill at whale-tracking.

SkillTrust corpus scan 14 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 22
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 22
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securitymedium SD-008
scripts/track_whales.py
securityhigh SD-007
scripts/whale_alerts.py
securityhigh SD-007
scripts/whale_alerts.py
securitymedium SD-008
scripts/whale_alerts.py
4 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/track_whales.py

Script uses a public Solana RPC endpoint for normal data retrieval; the URL is intentionally hard‑coded.

securityhigh SD-007 benign_example
scripts/track_whales.py

Helius RPC URL is a legitimate API endpoint used for token data; not malicious.

securityhigh SD-007 benign_example
scripts/track_whales.py

Helius base URL is a public API for blockchain queries; the reference is intentional.

securitymedium SD-008 benign_example
scripts/track_whales.py

String is a placeholder demo mint; not obfuscated or malicious.