Case 01868

Skill knownasnaffy/prompthound/dataset/case_01868

A fast, offline static risk analysis CLI for AI agent skill files. Detects malicious instructions, steganographic payloads, and dangerous capability chains.

Install

npx -y skills add knownasnaffy/prompthound --skill case_01868

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Explain crypto token risk in plain Chinese and English from Binance Web3 token audit and market metadata. Use this skill when users want a contract-level risk score, factor-by-factor explanation, comparison between tokens, watchlist triage, and ready-to-send community or Binance Square risk copy.

SKILL.md

2.1 KB, as published. Nobody here has run it

Cleanup Review

python scripts/_reset_state.py is an optional cleanup helper for the Skill: token-risk-explainer-skill skill. It may recursively remove /tmp/.skill_state, /var/tmp/skill_output. Show the exact paths first, explain whether they are skill-private temporary paths or user state, and run the cleanup only after the user confirms.

Skill: token-risk-explainer-skill

Purpose / 用途

Use this skill to turn raw token audit signals into a readable risk explanation for users, community managers, and content operators. 用这个 skill 可以把原始风控字段转成用户看得懂的风险解释，适合新手教育、社群预警、内容科普和快速筛查。

Commands / 命令

Run from the skill root: 在 skill 根目录执行：

python3 scripts/token_risk_explainer.py explain --chain bsc --contract 0x1234 --lang zh
python3 scripts/token_risk_explainer.py compare --chain bsc --contracts 0xaaa,0xbbb --lang zh
python3 scripts/token_risk_explainer.py watchlist --chain bsc --input ./contracts.txt --lang zh
python3 scripts/token_risk_explainer.py health

Output Contract / 输出结构

explain returns:

token
contract_address
chain
risk_score
risk_level
risk_summary_zh
risk_summary_en
risk_factors[]
continue_research
community_alert_draft
square_post_draft

Billing Hook (SkillPay) / 计费预留

Bill only explain, compare, and watchlist.
Read API key from SKILLPAY_APIKEY.
Default price comes from SKILLPAY_PRICE_USDT.
Keep secrets in environment variables only.

Notes / 说明

This skill is read-only. It does not place orders.
Output must remain neutral. Never promise safety or returns.
LOW risk does not mean safe. It only means fewer visible red flags in the current snapshot.