skills/jeremylongshore/claude-code-plugins-plus-skills/monitoring-whale-activity/Gen Agent Trust Hub
monitoring-whale-activity
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with well-known external APIs (Whale Alert, CoinGecko, and Etherscan) to fetch cryptocurrency transaction and price data. These network operations are consistent with the skill's stated purpose and do not involve data exfiltration.
- [SAFE]: Sensitive information such as API keys are managed through environment variables or configuration files rather than being hardcoded, which is a standard security best practice.
- [SAFE]: Local file access is limited to the user's home directory for caching (e.g.,
~/.whale_alert_cache.json) and configuration (e.g.,~/.whale_watchlist.json), which is appropriate and necessary for the tool's functionality. - [SAFE]: No obfuscation, command injection vulnerabilities, or unauthorized privilege escalation attempts were detected in the provided scripts or instructions.
Audit Metadata