Crypto Portfolio Tracker

Security checks across malware telemetry and agentic risk

Overview

This instruction-only crypto portfolio tracker appears read-only and purpose-aligned, but users should verify the external TRON command-line tool before running examples.

This skill looks safe for read-only crypto portfolio analysis. Before installing or using it, verify any `tron` CLI or external data source yourself, and do not provide wallet private keys or seed phrases; public wallet addresses can still reveal holdings.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If the user or agent runs a different or untrusted `tron` command than expected, the results or local behavior could be unreliable.

Why it was flagged

The skill's operational example depends on an external `tron` command, while the supplied requirements declare no required binaries or install source. This is purpose-aligned and user-directed, but the exact tool provenance is not documented.

Skill content
tron wallet --address TXXX... balance
Recommendation

Use only a trusted TRON CLI or reputable blockchain data provider, and confirm commands are read-only before running them.