telegram-honeypot-detector — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited telegram-honeypot-detector (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Checks token sellability on Ethereum via eth_call simulation.
from lib.gumloop_telegram import BotConfig, send_alert, build_alert, ScheduledBot, escape_md
import requests, os, jsonconfig = BotConfig(bot_token=os.environ["TELEGRAM_BOT_TOKEN"], chat_id=os.environ["TELEGRAM_CHAT_ID"])
RPC = "https://eth.llamarpc.com"def simulate_xfer(token, fr, to, amt):
data = "0xa9059cbb" + to[2:].zfill(64) + amt[2:].zfill(64)
pl = {"jsonrpc":"2.0","method":"eth_call","params":[{"from":fr,"to":token,"data":data},"latest"],"id":1}
r = requests.post(RPC, json=pl, timeout=10).json()
return r.get("result") not in (None, "0x")
def check(token):
b, s, a = "0x0000000000000000000000000000000000000001", "0x0000000000000000000000000000000000000002", hex(10**18)
buy = simulate_xfer(token, b, s, a)
sell = simulate_xfer(token, s, b, a)
if buy and not sell:
send_alert(config, f"🐝 *HONEYPOT*\nBuy: ✅ Sell: ❌")
else:
send_alert(config, f"✅ *Safe*\nBuy: {'✅' if buy else '❌'} Sell: {'✅' if sell else '❌'}")FROM python:3.11-slim
WORKDIR /app
RUN pip install lib-gumloop-telegram requests flask
COPY bot.py .
CMD ["python", "bot.py"]docker build -t tg-eth-honeypot .
docker run -d -e TELEGRAM_BOT_TOKEN=x -e TELEGRAM_CHAT_ID=y tg-eth-honeypotNot financial advice. Simulation not foolproof.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.