Solana Whale Tracker Pro

Real-time monitoring of Solana token prices, large transfers, liquidity pools, new tokens, and price alerts via Telegram and email.

This package looks like a real Solana monitoring tool, but several mismatches are concerning: the registry declares no required secrets even though the tool needs a Telegram bot token/chat_id and SMTP credentials; SKILL.md and README disagree about whether to use config/config.yaml or .env; and the code does not clearly auto-load those config files. Before installing or supplying credentials: 1) Verify the publisher/source (follow the GitHub repo in _meta.json/README and confirm it's legitimate). 2) Inspect/modify the code to ensure credentials are read securely (use environment variables or a secrets store, avoid plain text files), or run the tool in an isolated environment. 3) Use app‑specific SMTP passwords (not your primary account password) and create a dedicated Telegram bot/chat for alerts. 4) If you plan to let the agent invoke this skill autonomously, be extra cautious — autonomous access combined with unclear secret handling increases risk. If you want, I can point out exact lines to modify so credentials are loaded via python-dotenv or a secure secrets API, and verify there is no hidden network exfiltration in the code.

Type: OpenClaw Skill Name: solana-whale-tracker-pro Version: 1.0.0 The skill bundle provides legitimate functionality for monitoring Solana blockchain data, including token prices via CoinGecko and large transactions via public RPC nodes. The code in scripts/notifier.py, scripts/price_monitor.py, and scripts/whale_monitor.py uses standard libraries (requests, smtplib) for its stated purposes and contains no evidence of data exfiltration, malicious execution, or prompt injection attempts against the OpenClaw agent.