Onchain Test

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 0.1.2
• Hash: af03d58b2480febb7ba5469bfcf9be6c96ecb228d40a94788134e6a33172c20b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `SKILL.md` and `README.md` files clearly describe a CLI tool for crypto portfolio tracking and CEX history. While the tool requires sensitive API keys (e.g., `DEBANK_API_KEY`, `COINBASE_API_SECRET`, `BINANCE_API_SECRET`) for its functionality, the instructions for the AI agent are explicit about their purpose and use, without any evidence of prompt injection attempts to misuse these keys, exfiltrate data, or perform unauthorized actions. All commands and configurations are aligned with the stated purpose of the tool, and there are no indicators of malicious execution, persistence, or obfuscation.