misttrack-skills
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by SlowMist, a recognized security firm, and utilizes their proprietary API (openapi.misttrack.io) for security intelligence. All network operations are directed to this vendor-owned infrastructure.
- [COMMAND_EXECUTION]: The skill provides several well-structured Python scripts (address_investigation.py, batch_risk_check.py, risk_check.py, transfer_security_check.py) that wrap API calls. These scripts are designed to be executed by the agent to provide security analysis to the user.
- [DATA_EXFILTRATION]: The skill handles API authentication securely by recommending the use of environment variables (MISTTRACK_API_KEY) rather than hardcoded secrets. It does not access sensitive local files.
- [SAFE]: The documentation in SKILL.md provides explicit instructions for the agent on how to integrate with other wallet skills to perform autonomous security checks during transaction workflows. These instructions are legitimate and serve to enhance user safety by providing pre-transfer risk assessment.
- [SAFE]: No obfuscation techniques (such as Base64 encoding of commands), prompt injection attempts, or persistence mechanisms were identified in the analyzed files.
Audit Metadata