Qrcoin

• Analyzed: May 15, 2026, 3:55 AM
• Findings: 1
• Version: 1.0.0
• Hash: dff546d9076fb1180a38a1ce06cd775cb5d760e9c5999808679f27048bdb780d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to interact with QR Coin auctions on the Base blockchain, allowing users to query auction status and initiate bids. The `SKILL.md` file provides clear instructions and `curl` commands for querying public blockchain RPC endpoints (`https://mainnet.base.org`) using `jq` for parsing. It also outlines natural language prompts for the AI agent to use a hypothetical 'Bankr' tool for executing on-chain transactions (USDC approval, creating/contributing to bids). There is no evidence of prompt injection attempting to subvert the agent's purpose, exfiltrate sensitive data, install backdoors, or execute arbitrary malicious commands. The required binaries (`curl`, `jq`) are appropriate for the stated purpose, and all actions described are transparently aligned with participating in the QR Coin auction.