Meme Signal Scanner

• Outcome: Review
• Latest audit: May 28, 2026, 4:35 AM
• Version:
  1.0.0

Overview

This skill mostly scans public meme-coin data, but it also auto-activates broadly, describes recurring background polling, and says to report strong signals to an undefined creator.

Install only if you are comfortable with live crypto API lookups and speculative token scoring. Use it manually, avoid enabling background polling, and do not allow reports to a creator or external party unless you explicitly approve what is sent and where it goes.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list is unusually broad and includes generic terms like 'token', 'signal', 'scan', and 'alpha', combined with auto-activation. This can cause the skill to run in conversations where the user did not clearly intend to invoke a crypto-scanning workflow, increasing the chance of unexpected external requests and unsolicited financial-signal behavior.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The workflow describes repeated polling every 5 minutes, storing signals for 24 hours, and reporting strong signals to the creator, but the skill description does not warn users about this ongoing network activity or outbound reporting. That lack of transparency can lead to covert data transmission and user surprise, especially when paired with auto-activation.

External Transmission

Medium

• Category: Data Exfiltration

Content

### DEXScreener
```bash
# Latest boosted tokens
curl -s 'https://api.dexscreener.com/token-boosts/latest/v1'

# Top boosted tokens
curl -s 'https://api.dexscreener.com/token-boosts/top/v1'

• Confidence: 84% confidence
• Finding: https://api.dexscreener.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

curl -s 'https://api.dexscreener.com/token-boosts/latest/v1'

# Top boosted tokens
curl -s 'https://api.dexscreener.com/token-boosts/top/v1'

# Token details
curl -s 'https://api.dexscreener.com/latest/dex/tokens/TOKEN_ADDRESS'

• Confidence: 84% confidence
• Finding: https://api.dexscreener.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

curl -s 'https://api.dexscreener.com/token-boosts/top/v1'

# Token details
curl -s 'https://api.dexscreener.com/latest/dex/tokens/TOKEN_ADDRESS'

# Search
curl -s 'https://api.dexscreener.com/latest/dex/search?q=KEYWORD'

• Confidence: 87% confidence
• Finding: https://api.dexscreener.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

### GeckoTerminal (DEX analytics)
```bash
# Trending pools by chain
curl -s 'https://api.geckoterminal.com/api/v2/networks/solana/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/eth/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/base/trending_pools'

• Confidence: 83% confidence
• Finding: https://api.geckoterminal.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Trending pools by chain
curl -s 'https://api.geckoterminal.com/api/v2/networks/solana/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/eth/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/base/trending_pools'

# New pools

• Confidence: 83% confidence
• Finding: https://api.geckoterminal.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

# Trending pools by chain
curl -s 'https://api.geckoterminal.com/api/v2/networks/solana/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/eth/trending_pools'
curl -s 'https://api.geckoterminal.com/api/v2/networks/base/trending_pools'

# New pools
curl -s 'https://api.geckoterminal.com/api/v2/networks/solana/new_pools'

• Confidence: 83% confidence
• Finding: https://api.geckoterminal.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

curl -s 'https://api.geckoterminal.com/api/v2/networks/base/trending_pools'

# New pools
curl -s 'https://api.geckoterminal.com/api/v2/networks/solana/new_pools'
```

### Pump.fun (Solana meme launchpad)

• Confidence: 82% confidence
• Finding: https://api.geckoterminal.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

### CoinGecko Trending
```bash
curl -s 'https://api.coingecko.com/api/v3/search/trending'
```

## Scoring System (0-100)

• Confidence: 80% confidence
• Finding: https://api.coingecko.com/

VirusTotal

66/66 vendors flagged this skill as clean.