FairScale Solana

Solana wallet reputation. Ask anything in plain English — "is this a bot?", "whale?", "diamond hands?" — get instant answers.

Security Scan

The skill's stated purpose (Solana wallet reputation) matches the included code and docs, but multiple inconsistencies in endpoints, authentication headers, and required tooling make the package internally incoherent and worth further verification before use.

Purpose & Capability

The skill is a reputation/scoring integration for Solana wallets and the files (README, SKILL.md, references, and a helper script) align with that purpose. However, the various files reference different base URLs (api.fairscale.xyz vs api2.fairscale.xyz), different auth headers (x-api-key vs fairkey vs FAIRSCALE_API_KEY env var), and different docs pages (docs.fairscale.xyz vs api2 docs). These inconsistencies are not fatal but reduce confidence that the packaging is accurate or up-to-date.

Instruction Scope

Runtime instructions tell the agent to call remote APIs, filter results, and apply custom rules — appropriate for the stated function. But SKILL.md states the Free tier requires no authentication while the reference docs and scripts state that a 'fairkey' header (or x-api-key) is required for requests. The included shell helper posts to api2.fairscale.xyz and expects an API key argument; SKILL.md uses api.fairscale.xyz. The agent could be given ambiguous guidance about whether an API key is needed and which endpoint/headers to use.

Install Mechanism

There is no install spec (instruction-only with a small helper script). Nothing is downloaded or written by the skill installer itself. This is the lowest-risk install mechanism.

Credentials

The skill declares no required environment variables, but README suggests configuring FAIRSCALE_API_KEY and SKILL.md/refs expect x-api-key or fairkey headers. The helper script expects an API key argument and pipes output through jq (jq is not declared as a required binary). The absence of a clearly declared credential requirement and inconsistent header/variable names is disproportionate and confusing.

Persistence & Privilege

The skill does not request persistent or privileged platform presence (always:false). It does not modify other skills or system-wide settings. Autonomy is allowed by default but is not combined with other high-risk factors here.

What to consider before installing

This skill appears to do what it says (query a reputation API for Solana wallets), but there are several red flags that justify caution: - Inconsistent endpoints and auth: SKILL.md uses https://api.fairscale.xyz and x-api-key; references and the helper script use https://api2.fairscale.xyz and a fairkey header; README mentions FAIRSCALE_API_KEY. Verify which base URL and header the official service actually uses before supplying credentials. - Missing declarations: The helper script uses jq but the skill metadata does not declare jq as a required binary. If you run the script on a host without jq it will fail. - Auth confusion: SKILL.md claims Free tier requires no auth, but the reference docs and script require an API key. Don’t assume anonymous access — tests could leak request patterns tied to your IP or wallet. - Payment/upgrade endpoints: The README and SKILL.md mention paid tiers and on-chain payments. Confirm billing/payment flows with the vendor and avoid sending secrets or signing transactions until you verify the service is legitimate. Recommendations before installing or using: 1. Confirm the official vendor domains (docs/sales/status) independently (e.g., via known company site or public registry) and ensure api endpoints are consistent. 2. Ask the publisher which header name and base URL to use, and whether a Free-tier call truly requires no key. 3. Test with a throwaway API key / wallet and monitor network traffic to ensure calls go where expected. 4. Do not paste a production API key or private wallet keys into the skill until the above are confirmed. Given the mismatches, this looks like sloppy packaging or a version mismatch rather than overtly malicious behavior — but verify the vendor and endpoints before supplying credentials or enabling agent automation.

FairScale Reputation Skill

Real-time wallet reputation scoring for Solana. Use this skill to check if a wallet is trustworthy before transacting.

What This Skill Does

• Check wallet reputation before any transaction
• Assess risk level for a given transaction amount
• Apply custom rules for your specific use case
• Batch check multiple wallets at once

When To Use This Skill

Use FairScale when:

• An agent needs to decide whether to transact with a wallet
• Filtering wallets for airdrops, whitelists, or access control
• Assessing risk before accepting a trade or swap
• Verifying counterparty reputation in agent-to-agent transactions

Endpoints

GET /score

Get the FairScore (0-100) for any Solana wallet.

Free tier: 100 calls/day Pro tier: 10,000 calls/day

GET https://api.fairscale.xyz/score?wallet=ADDRESS

Response:

{
  "wallet": "7xK9...",
  "fairscore": 72,
  "tier": "gold",
  "vouch_boost": 1.5
}

GET /check

Pre-transaction risk assessment. Returns risk level and recommended max transaction amount.

Free tier: 100 calls/day

GET https://api.fairscale.xyz/check?wallet=ADDRESS&amount=500

Response:

{
  "wallet": "7xK9...",
  "fairscore": 72,
  "risk_level": "medium",
  "recommendation": "proceed_with_caution",
  "max_suggested_amount_usd": 1000,
  "amount_check": {
    "requested": 500,
    "max_suggested": 1000,
    "proceed": true
  }
}

POST /score/custom

Apply custom scoring rules. Pro tier required.

POST https://api.fairscale.xyz/score/custom
Content-Type: application/json

{
  "wallet": "7xK9...",
  "rules": {
    "min_score": 60,
    "min_age_days": 180,
    "no_rug_history": true,
    "min_transaction_count": 100,
    "min_volume_usd": 10000,
    "max_burst_ratio": 0.5,
    "min_tier": "silver"
  }
}

Response:

{
  "wallet": "7xK9...",
  "passes": true,
  "fairscore": 72,
  "rule_results": {
    "min_score": { "pass": true, "required": 60, "actual": 72 },
    "min_age_days": { "pass": true, "required": 180, "actual": 340 },
    "no_rug_history": { "pass": true, "actual": false },
    "min_transaction_count": { "pass": true, "required": 100, "actual": 523 }
  },
  "recommendation": "proceed"
}

POST /batch

Score multiple wallets at once. Pro tier required.

POST https://api.fairscale.xyz/batch
Content-Type: application/json

{
  "wallets": ["address1", "address2", "address3"]
}

Response:

{
  "count": 3,
  "results": [
    { "wallet": "address1", "fairscore": 72, "tier": "gold" },
    { "wallet": "address2", "fairscore": 45, "tier": "silver" },
    { "wallet": "address3", "fairscore": 23, "tier": "bronze" }
  ]
}

Score Interpretation

Score	Tier	Risk Level	Recommendation
80-100	Platinum	Low	Proceed
60-79	Gold	Medium	Proceed with caution
40-59	Silver	High	Small amounts only
0-39	Bronze	Very High	Avoid

Example Usage

Basic Trust Check

User: "Should I accept a 500 USDC trade from wallet 7xK9...?"

Agent steps:
1. Call GET /check?wallet=7xK9...&amount=500
2. Response: score 34, risk "very_high", recommendation "avoid"
3. Respond: "This wallet has a very low reputation score (34/100). I recommend not proceeding with this trade."

Filtering for Airdrop

User: "Filter this list of wallets for my airdrop - only 60+ score"

Agent steps:
1. Call POST /batch with wallet list
2. Filter results where fairscore >= 60
3. Return qualifying wallets

Custom Agent Rules

Agent config: "Only trade with wallets that have score 70+, age 6+ months, no rug history"

Before each trade:
1. Call POST /score/custom with rules
2. Check if passes: true
3. Proceed only if passes

Rate Limits

Tier	Daily Limit	Rate Limit
Free	100 calls	10/minute
Pro	10,000 calls	100/minute
Enterprise	Unlimited	1000/minute

Authentication

Free tier: No authentication required. Rate limited by IP.

Pro/Enterprise: Include API key in header:

x-api-key: fs_your_api_key_here

Get an API key:

POST https://api.fairscale.xyz/register
{ "wallet": "your_solana_wallet" }

Upgrade to Pro

For higher limits and custom scoring:

POST https://api.fairscale.xyz/upgrade
{
  "api_key": "fs_your_key",
  "tier": "pro",
  "signature": "payment_tx_signature"
}

Cost: $50 USDC/month

Available Custom Rules

Rule	Type	Description
min_score	number	Minimum FairScore (0-100)
min_age_days	number	Minimum wallet age in days
no_rug_history	boolean	Reject if wallet has rug history
min_transaction_count	number	Minimum number of transactions
min_volume_usd	number	Minimum total volume in USD
max_burst_ratio	number	Maximum burst ratio (0-1)
min_tier	string	Minimum tier (bronze/silver/gold/platinum)

Support

• Docs: https://docs.fairscale.xyz
• API Status: https://status.fairscale.xyz
• Contact: [e-mail]