launch-bnb-token-on-flap
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's instructions, required tools, and external endpoints are consistent with its stated purpose (constructing and launching a BNB token on Flap); it asks for the expected runtime inputs (wallet, RPC, metadata upload) and contains no surprising installs or unrelated credential requests.
This skill appears to be what it says: a step-by-step instruction set for building and broadcasting a Flap BNB token launch. Before using it, consider the following: (1) you must provide a signing wallet and an RPC URL — never paste private keys into third-party services; sign only transactions you independently verify, (2) the skill uploads image/metadata to https://funcs.flap.sh — review that service's privacy/pinning policy because uploads go to an external endpoint, (3) the salt-finding code generates private-key material locally for randomness — do not reuse any generated private key as an account/private-key for your wallet, (4) using the public fallback RPC will disclose request data (addresses, calls) to that provider — prefer a trusted RPC, and (5) verify the listed contract addresses (Portal, VaultPortal, factory addresses) with Flap's official docs before broadcasting funds. If you want stronger assurance, ask the skill author for provenance (who maintains it) and confirm the Flap upload endpoint and contract addresses against an official source.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.