Isma Airdrop Finder

What to consider before installing: - Functionality vs reality: The airdrop report generator currently uses a hard-coded sample dataset, so it does not appear to actually scrape DefiLlama, Crunchbase, or other live sources despite the SKILL.md claiming those sources. Treat its airdrop output as example/prototype data unless you or the author add real integrations. - Network activity: The scripts perform outgoing HTTPS calls to CoinGecko (public API) and otherwise write files to the skill folder (reports/, state.json). If you run it, expect outgoing requests and local files being created/updated. - No secrets requested: The skill does not ask for API keys or other credentials, which reduces exfiltration risk. Still review any changes before scheduling it to run automatically. - Automation & cron: SKILL.md shows cron/automation examples requiring you to cd into the skill folder. Make sure any scheduled command uses the correct absolute path and that you run the code in an account/sandbox you control. - Safety of suggested actions: The human-facing tips recommend interacting with testnets/bridges and Discord/Twitter for early rewards — these are manual actions that can put your wallet at risk if you follow instructions without careful verification. The skill will not perform wallet interactions itself, but the guidance it gives can encourage risky behavior. - If you need true live discovery: review/modify generate_airdrop_report.js to add real API calls (and then you may need API keys); audit any added network endpoints and permissions before enabling automation. Recommendation: You can run the market and heartbeat scripts for local reporting, but treat the airdrop outputs as illustrative until the code is updated to fetch/validate live sources. If you plan to schedule this skill for automated runs, inspect/modify the airdrop script to point at trusted data sources and consider running first in an isolated environment.