Btc Contract Scanner Free

• Outcome: Pass
• Latest audit: Jun 8, 2026 at 3:58 AM UTC
• Version:
  1.0.0

Overview

This is a simple BTC signal skill with only markdown instructions; its network data source and proxy use are disclosed enough to be purpose-aligned, though users should understand the proxy and financial-risk implications.

Before installing, treat the signals as informational rather than financial advice, and confirm you are comfortable with the skill contacting OKX and routing that traffic through any configured Clash proxy. No exchange API key is requested by the artifact.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 87% confidence
• Finding: The skill explicitly states it uses OKX real-time market data via a Clash proxy, but does not warn users that running it may initiate outbound network connections through a proxy. This creates transparency and trust issues: users may unknowingly route traffic through an external service, exposing metadata, network policy violations, or jurisdiction/compliance concerns.

VirusTotal

64/64 vendors flagged this skill as clean.