Atlas / Skills / jeremylongshore / Tracking Token Launches

Tracking Token LaunchesSAFE

skills/jeremylongshore/tracking-token-launches

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Verdict
SAFE
Grade
B
Trust score
89 /100
Version
1.30.0
Hosts
1 documented
License
MIT
Stars
2,823
01

Overview

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Read from source at commit 4f83675ca38aOBSERVED · 2026-10-08
02

Install

Commands as the repository documents them. They are shown, not run.

pip install requests
03

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
04

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: tracking-token-launches
description: 'Track new token launches across DEXes with risk analysis and contract
  verification.

  Use when discovering new token launches, monitoring IDOs, or analyzing token contracts.

  Trigger with phrases like "track launches", "find new tokens", "new pairs on uniswap",

  "token risk analysis", or "monitor IDOs".

  '
allowed-tools: Read, Write, Edit, Grep, Glob, Bash(python:*launch_tracker*)
version: 1.30.0
author: Jeremy Longshore <[email protected]>
license: MIT
tags:
- crypto
- monitoring
- tracking-token
compatibility: Designed for Claude Code
---
# Token Launch Tracker

## Overview

Monitor new token launches across decentralized exchanges. Detect PairCreated events from DEX factory contracts, fetch token metadata, and analyze contracts for risk indicators like mint functions, blacklists, proxy patterns, and ownership status.

## Prerequisites

Before using this skill, ensure you have:

- Python 3.8+ with `requests` library
- RPC endpoint access (public endpoints work for basic usage)
- Optional: Etherscan API key for contract verification checks
- Optional: Custom RPC URLs for higher rate limits

## Commands

### recent - Show Recent Launches

```bash
python launch_tracker.py recent --chain ethereum --hours 24
python launch_tracker.py recent --chain base --analyze --limit 20
python launch_tracker.py recent --chain bsc --dex "PancakeSwap V2" -f json
```

Options:

- `--chain, -c`: Chain to scan (ethereum, bsc, arbitrum, base, polygon)
- `--hours, -H`: Hours to look back (default: 24)
- `--dex, -d`: Filter by DEX name
- `--limit, -l`: Maximum results (default: 50)
- `--analyze, -a`: Include token and contract analysis
- `--rpc-url`: Custom RPC URL

### detail - Token Details

```bash
python launch_tracker.py detail --address 0x... --chain ethereum
```

Options:

- `--address, -a`: Token contract address (required)
- `--chain, -c`: Chain (default: ethereum)
- `--pair, -p`: Pair address (optional)
- `--etherscan-key`: API key for verification check

### risk - Risk Analysis

```bash
python launch_tracker.py risk --address 0x... --chain base
```

Analyzes contract for risk indicators:

- Mint function (HIGH risk)
- Proxy contract (MEDIUM risk)
- Not verified (MEDIUM risk)
- Blacklist functionality (MEDIUM risk)
- Active owner (LOW risk)

### summary - Launch Statistics

```bash
python launch_tracker.py summary --hours 24
python launch_tracker.py summary --chains ethereum,base,arbitrum
```

### dexes - List DEXes

```bash
python launch_tracker.py dexes --chain bsc
```

### chains - List Chains

```bash
python launch_tracker.py chains
```

## Instructions

1. **Check recent launches** on a specific chain:

   ```bash
   cd ${CLAUDE_SKILL_DIR}/scripts
   python launch_tracker.py recent --chain ethereum --hours 6
   ```

2. **Get detailed token info** for a specific address:

   ```bash
   python launch_tracker.py detail --address 0x6982508145454ce325ddbe47a25d4ec3d2311933 --chain ethereum
   ```

3. **Analyze token risk** before interaction:

   ```bash
   python launch_tracker.py risk --address 0x... --chain base --etherscan-key YOUR_KEY
   ```

4. **View cross-chain summary**:

   ```bash
   python launch_tracker.py summary --hours 24
   ```

5. **Export to JSON** for programmatic use:

   ```bash
   python launch_tracker.py -f json recent --chain ethereum --analyze > launches.json
   ```

## Supported Chains

| Chain | DEXes | Block Time |
|-------|-------|------------|
| Ethereum | Uniswap V2/V3, SushiSwap | 12s |
| BSC | PancakeSwap V2/V3 | 3s |
| Arbitrum | Uniswap V3, Camelot, SushiSwap | 0.25s |
| Base | Uniswap V3, Aerodrome | 2s |
| Polygon | Uniswap V3, QuickSwap, SushiSwap | 2s |

## Risk Indicators

| Indicator | Severity | Description |
|-----------|----------|-------------|
| Mint function | HIGH | Contract can mint new tokens |
| Proxy contract | MEDIUM | Implementation can be changed |
| Not verified | MEDIUM | Source code not public |
| Blacklist/whitelist | MEDIUM | Can restrict transfers |
| Active owner | LOW | Ownership not renounced |
| Small bytecode | INFO | Might be minimal/proxy |

## Output

- **Table format**: Formatted ASCII tables with token data
- **JSON format**: Structured data for programmatic use
- **Risk scores**: 0-100 scale (higher = riskier)
- **Links**: Explorer and DEXScreener URLs

## Error Handling

See `${CLAUDE_SKILL_DIR}/references/errors.md` for comprehensive error handling including:

- RPC connection issues and fallback chain
- Rate limiting and backoff strategies
- Contract analysis edge cases

## Examples

See `${CLAUDE_SKILL_DIR}/references/examples.md` for detailed examples including:

- Finding high-risk tokens
- Multi-chain monitoring scripts
- Python integration

## Resources

- [Uniswap V2 Factory](https://docs.uniswap.org/contracts/v2/reference/smart-contracts/factory)
- PancakeSwap Factory
- [DEXScreener](https://dexscreener.com/) - Real-time pair data
- [Etherscan API](https://docs.etherscan.io/) - Contract verification
05

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (3 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (6)

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/event_monitor.py:272
return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/event_monitor.py:278
return bytes.fromhex(string_data).decode("utf-8", errors="ignore")
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/event_monitor.py:280
return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/token_analyzer.py:168
return bytes.fromhex(data).decode("utf-8", errors="ignore").strip("\x00")
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/token_analyzer.py:173
return bytes.fromhex(string_data).decode("utf-8", errors="ignore")
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
references/implementation.md:7
1. Use Read tool to load API credentials from ${CLAUDE_SKILL_DIR}/config/crypto-apis.env
Why it matters. asks the agent to read credentials

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__tracking-token-launches.json · Report an issue / request a re-scan
06

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-084f83675ca38aSAFEB89first audit
07

Questions

What does the Tracking Token Launches skill do?

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Is Tracking Token Launches safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can Tracking Token Launches access on my machine?

The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.

Which assistants does Tracking Token Launches work with?

Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement