BD whale-alert-monitor
虚拟币大户账户预警监测助手 - 实时监控鲸鱼钱包动向、大额转账、交易所资金流向。 当用户需要以下功能时触发此skill: (1) 监控特定大户/鲸鱼钱包的交易活动 (2) 追踪大额资金流入/流出交易所 (3) 设置自定义阈值的大额转账预警 (4) 分析鲸鱼持仓变化和积累/派发模式 (5) 接收Telegram/Discord实时预警通知 (6) 生成鲸鱼行为报告和趋势分析
As a process D 49/100 · Unfinished process — weak spots: result and completion, when it triggers, inputs and preconditions
ProcedureDiscordTelegramInfrastructuretype and topics are labelled automatically from the skill text
This is a copy of a skill from another catalog; the rating counts the canonical one: whale-alert-monitor (ClawHub)
How to improve
- Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
For the model run — optional
- Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
- A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.
Guard findings · 22
✓ No critical or high findings
Medium and low: 22
-
low Secrets in code
secret-high-entropy-tokenreferences/wallet-labels.md:7High-entropy token-like string (may be an id, hash or a credential)0x3f…0bE # 热钱包1
-
low Secrets in code
secret-high-entropy-tokenreferences/wallet-labels.md:8High-entropy token-like string (may be an id, hash or a credential)0xdB…BB6 # 热钱包2
-
low Secrets in code
secret-high-entropy-tokenreferences/wallet-labels.md:9High-entropy token-like string (may be an id, hash or a credential)0x5a…fcb # 冷钱包
-
low Secrets in code
secret-high-entropy-tokenreferences/wallet-labels.md:14High-entropy token-like string (may be an id, hash or a credential)0x71…5d3
-
low Secrets in code
secret-high-entropy-tokenreferences/wallet-labels.md:15High-entropy token-like string (may be an id, hash or a credential)0x50…3Da
-
low Exfiltration
exfil-webhook-urlscripts/alert_manager.py:149Webhook / callback URL commonly used for exfiltration (verify the destination) (the skill's own vendor host; quoted — discussed, not commanded)url = f"https://api.telegram.org/bot{bot_token}/sendMessage"vendor-hostquoted -
low Secrets in code
secret-high-entropy-tokenscripts/exchange_flow.py:50High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x3f…0bE',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/exchange_flow.py:51High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0xdB…BB6',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/exchange_flow.py:52High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x5a…fcb'
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/exchange_flow.py:58High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x71…5d3',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/exchange_flow.py:59High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x50…3Da'
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/holding_analyzer.py:264High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)address = "0x74…8D3"
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/monitor_daemon.py:185High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'address': '0x74…8D3',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/whale_tracker.py:53High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x3f…0bE': 'Binance Hot Wallet 1',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/whale_tracker.py:54High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0xdB…BB6': 'Binance Hot Wallet 2',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/whale_tracker.py:55High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x71…5d3': 'Coinbase',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/whale_tracker.py:56High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)'0x2B…BB9': 'KuCoin',
quoted -
low Secrets in code
secret-high-entropy-tokenscripts/whale_tracker.py:263High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)tracker.add_wallet("0x74…8D3", "Smart Whale A")quoted -
low Secrets in code
secret-high-entropy-tokenSKILL.md:78High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)- address: "0x74…8D3"
quoted -
low Secrets in code
secret-high-entropy-tokenSKILL.md:81High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)- address: "0x8b…8D3"
quoted -
low Secrets in code
secret-high-entropy-tokenSKILL.md:96High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)- "0x3f…0bE"
quoted -
low Secrets in code
secret-high-entropy-tokenSKILL.md:101High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)- "0x71…5d3"
quoted
Files scanned: 12. Evidence is masked. Grey chips explain why severity was lowered.
Against the Agent Skills spec
- warning
description-no-whendescription does not say WHEN to use the skill (no "use when")
Process rating: all ten parameters 49/100
- 0Result and completion. Does not say what the result is
- 0Inputs and preconditions. Does not say what the process needs to start
- 0Failures and branches. Linear process with no failure handling
- 0Progress reporting. Says nothing while it works
- 20When it triggers. No condition that starts the skill
- 40Consistency. Frontmatter name (whale-alert-monitor) differs from the folder (shenmeng-whale-alert-monitor-2025)
- 100Tools and files. No external tools needed
- 100Steps. 40 steps
- 100Execution cost. Instruction body is 1201 tokens
- 100Running it twice. No mutating operations
Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.
Quality signals
- +5Description has no quoted example phrases that should trigger the skill
- +4Description does not say when NOT to use the skill (false activations)
- +3Output format is not stated: the model decides each time
- -42 reference files, but SKILL.md never points to them: the model will not open them
- +1No license
- +2Single-language instructions
- +3Description length 187: enough signal without eating the budget
- +4Structure: 29 headings
- +3Step-by-step instructions: 40 items
- +4Has examples (10 code blocks)
- +3All 6 scripts are documented
Quality base 70; lint remarks subtract, signals add up to 100. Result: 71.
External checks
ClawHub: suspicious
This paid crypto-monitoring skill needs review because it presents random simulated data as live whale-alert intelligence and has under-scoped billing and notification behavior.
LLM: suspicious (high) · VirusTotal: · 29 May 2026