Messari BTC & ETH Tracker - powered by Teneo Protocol
Security checks across malware telemetry and agentic risk
Overview
The skill's high-level claim (pull Messari BTC/ETH data) is plausible, but the instructions rely on a third-party Teneo WebSocket/payments flow and require wallet signing without clear, proportional safeguards or explanation — this mismatch and lack of detail is concerning.
Before installing or using this skill: (1) Verify the @teneo-protocol/sdk npm package and GitHub repo contents to ensure code matches the README and is trustworthy. (2) Confirm the identity and reputation of the backend (wss://backend.developer.chatroom.teneo-protocol.ai) and ask who controls it and how payments/pricing are enforced. (3) Never paste private keys into tools; prefer WalletConnect or a hardware wallet that shows transaction details and requires manual approval. (4) Test with a small amount of USDC or a testnet flow first and require the skill to present exact transaction details before signing. (5) Ask the author to clarify whether Messari credentials are used, how data provenance is verified, and to provide explicit limits on what the agent will request you to sign.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings