Tracking Token LaunchesSAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
4f83675ca38aOBSERVED · 2026-10-08Install
Commands as the repository documents them. They are shown, not run.
pip install requests
Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: tracking-token-launches description: 'Track new token launches across DEXes with risk analysis and contract verification. Use when discovering new token launches, monitoring IDOs, or analyzing token contracts. Trigger with phrases like "track launches", "find new tokens", "new pairs on uniswap", "token risk analysis", or "monitor IDOs". ' allowed-tools: Read, Write, Edit, Grep, Glob, Bash(python:*launch_tracker*) version: 1.30.0 author: Jeremy Longshore <[email protected]> license: MIT tags: - crypto - monitoring - tracking-token compatibility: Designed for Claude Code --- # Token Launch Tracker ## Overview Monitor new token launches across decentralized exchanges. Detect PairCreated events from DEX factory contracts, fetch token metadata, and analyze contracts for risk indicators like mint functions, blacklists, proxy patterns, and ownership status. ## Prerequisites Before using this skill, ensure you have: - Python 3.8+ with `requests` library - RPC endpoint access (public endpoints work for basic usage) - Optional: Etherscan API key for contract verification checks - Optional: Custom RPC URLs for higher rate limits ## Commands ### recent - Show Recent Launches ```bash python launch_tracker.py recent --chain ethereum --hours 24 python launch_tracker.py recent --chain base --analyze --limit 20 python launch_tracker.py recent --chain bsc --dex "PancakeSwap V2" -f json ``` Options: - `--chain, -c`: Chain to scan (ethereum, bsc, arbitrum, base, polygon) - `--hours, -H`: Hours to look back (default: 24) - `--dex, -d`: Filter by DEX name - `--limit, -l`: Maximum results (default: 50) - `--analyze, -a`: Include token and contract analysis - `--rpc-url`: Custom RPC URL ### detail - Token Details ```bash python launch_tracker.py detail --address 0x... --chain ethereum ``` Options: - `--address, -a`: Token contract address (required) - `--chain, -c`: Chain (default: ethereum) - `--pair, -p`: Pair address (optional) - `--etherscan-key`: API key for verification check ### risk - Risk Analysis ```bash python launch_tracker.py risk --address 0x... --chain base ``` Analyzes contract for risk indicators: - Mint function (HIGH risk) - Proxy contract (MEDIUM risk) - Not verified (MEDIUM risk) - Blacklist functionality (MEDIUM risk) - Active owner (LOW risk) ### summary - Launch Statistics ```bash python launch_tracker.py summary --hours 24 python launch_tracker.py summary --chains ethereum,base,arbitrum ``` ### dexes - List DEXes ```bash python launch_tracker.py dexes --chain bsc ``` ### chains - List Chains ```bash python launch_tracker.py chains ``` ## Instructions 1. **Check recent launches** on a specific chain: ```bash cd ${CLAUDE_SKILL_DIR}/scripts python launch_tracker.py recent --chain ethereum --hours 6 ``` 2. **Get detailed token info** for a specific address: ```bash python launch_tracker.py detail --address 0x6982508145454ce325ddbe47a25d4ec3d2311933 --chain ethereum ``` 3. **Analyze token risk** before interaction: ```bash python launch_tracker.py risk --address 0x... --chain base --etherscan-key YOUR_KEY ``` 4. **View cross-chain summary**: ```bash python launch_tracker.py summary --hours 24 ``` 5. **Export to JSON** for programmatic use: ```bash python launch_tracker.py -f json recent --chain ethereum --analyze > launches.json ``` ## Supported Chains | Chain | DEXes | Block Time | |-------|-------|------------| | Ethereum | Uniswap V2/V3, SushiSwap | 12s | | BSC | PancakeSwap V2/V3 | 3s | | Arbitrum | Uniswap V3, Camelot, SushiSwap | 0.25s | | Base | Uniswap V3, Aerodrome | 2s | | Polygon | Uniswap V3, QuickSwap, SushiSwap | 2s | ## Risk Indicators | Indicator | Severity | Description | |-----------|----------|-------------| | Mint function | HIGH | Contract can mint new tokens | | Proxy contract | MEDIUM | Implementation can be changed | | Not verified | MEDIUM | Source code not public | | Blacklist/whitelist | MEDIUM | Can restrict transfers | | Active owner | LOW | Ownership not renounced | | Small bytecode | INFO | Might be minimal/proxy | ## Output - **Table format**: Formatted ASCII tables with token data - **JSON format**: Structured data for programmatic use - **Risk scores**: 0-100 scale (higher = riskier) - **Links**: Explorer and DEXScreener URLs ## Error Handling See `${CLAUDE_SKILL_DIR}/references/errors.md` for comprehensive error handling including: - RPC connection issues and fallback chain - Rate limiting and backoff strategies - Contract analysis edge cases ## Examples See `${CLAUDE_SKILL_DIR}/references/examples.md` for detailed examples including: - Finding high-risk tokens - Multi-chain monitoring scripts - Python integration ## Resources - [Uniswap V2 Factory](https://docs.uniswap.org/contracts/v2/reference/smart-contracts/factory) - PancakeSwap Factory - [DEXScreener](https://dexscreener.com/) - Real-time pair data - [Etherscan API](https://docs.etherscan.io/) - Contract verification
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")return bytes.fromhex(string_data).decode("utf-8", errors="ignore")return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")return bytes.fromhex(string_data).decode("utf-8", errors="ignore")1. Use Read tool to load API credentials from ${CLAUDE_SKILL_DIR}/config/crypto-apis.envGates applied: no_behavioural_pass.
4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__tracking-token-launches.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 4f83675ca38a | SAFE | B | 89 | first audit |
Questions
What does the Tracking Token Launches skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Tracking Token Launches safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Tracking Token Launches access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does Tracking Token Launches work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.