Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrowly scoped Polygon fund-flow analysis helper with disclosed external blockchain data lookups and no executable install or persistence behavior.
Before installing, users should be aware that analysis may involve sending public blockchain identifiers such as addresses, transaction hashes, query parameters, and unknown topic0 hashes to Dune or OpenChain. Use it for cases where that external lookup behavior is acceptable, and avoid feeding sensitive private investigation context unless you are comfortable with those services seeing the lookup pattern.
The operational instructions are written as mandatory guidance in Chinese, and the file does not offer any user language choice or explain that the skill is intentionally restricted to a Chinese-speaking context. This creates a natural-language locale policy concern because the skill appears to force a specific language without opt-in.
The file hardcodes an external endpoint at api.openchain.xyz for signature resolution, creating a real outbound network dependency. In a fund-flow analysis skill, this can leak queried identifiers, usage patterns, or sensitive investigation context to a third party, even if the payload is not highly secret by itself.
# Topic0 字典
skill 在解码 log 时优先查本字典，未命中再调 OpenChain Signature Database API
(https://api.openchain.xyz/signature-database/v1/lookup)。
字段：`topic0_hash` -> `event_signature` -> `protocol_family`
The documentation explicitly instructs the skill to fall back to an external API when a local dictionary lookup misses, but it provides no warning or consent boundary about transmitting analysis-derived data off-platform. Even if the transmitted value is only a topic0 hash, this still creates undisclosed external data flow and expands the trust boundary to a third-party service.
No suspicious patterns detected.