polygraph.so
Login

Private · litmus-skill-v2

Bankr ecosystem

Static safety grades for the Bankr skill library, and behavioral grades for the agents that ship their own MCP server.

106A1D· 107 skills · 6 featured · 7 agent MCP servers

Each skill is graded by litmus-skill-v2, a deterministic STATIC scan of its SKILL.md + bundle: S-01 prompt-injection / context-poisoning, S-03 data-exfiltration instructions, and S-04 dangerous bundled commands. An A means static-clean, not behavioral proof — a skill’s instructions are interpreted by an agent at runtime.

litmus-skill-v2 corrects the static scan’s earlier over-flagging of defensive skills — a security-scanner that documents “ignore previous instructions”, or onboarding text mentioning an API key, no longer reads as injection/exfil. The only flagged skill is gitlawb (D), a real finding (a bundled curl | sh installer). Every grade here is read live from its hosted_runs row — reproduce any of them with npx -p @polygraphso/litmus polygraphso-litmus-skill — and none are published onchain.

Bankr · 4
A
bankr
S-01 passS-03 passS-04 pass
A
bankr-shopify
S-01 passS-03 passS-04 pass
A
bankr-token-scam-analysis
S-01 passS-03 passS-04 pass
A
bankr-twitter-agent★
S-01 passS-03 passS-04 pass
Base · 6
A
base
S-01 passS-03 passS-04 pass
A
base-account★
S-01 passS-03 passS-04 pass
A
base-deploy
S-01 passS-03 passS-04 pass
A
base-minikit
S-01 passS-03 passS-04 pass
A
base-network
S-01 passS-03 passS-04 pass
A
base-node
S-01 passS-03 passS-04 pass
Uniswap · 5
A
uniswap-cca
S-01 passS-03 passS-04 pass
A
uniswap-driver
S-01 passS-03 passS-04 pass
A
uniswap-hooks
S-01 passS-03 passS-04 pass
A
uniswap-trading★
S-01 passS-03 passS-04 pass
A
uniswap-viem
S-01 passS-03 passS-04 pass
Eth tooling · 16
A
ethskills-addresses
S-01 passS-03 passS-04 pass
A
ethskills-audit
S-01 passS-03 passS-04 pass
A
ethskills-building-blocks
S-01 passS-03 passS-04 pass
A
ethskills-frontend-playbook
S-01 passS-03 passS-04 pass
A
ethskills-frontend-ux
S-01 passS-03 passS-04 pass
A
ethskills-gas
S-01 passS-03 passS-04 pass
A
ethskills-indexing
S-01 passS-03 passS-04 pass
A
ethskills-l2s
S-01 passS-03 passS-04 pass
A
ethskills-orchestration
S-01 passS-03 passS-04 pass
A
ethskills-qa
S-01 passS-03 passS-04 pass
A
ethskills-security★
S-01 passS-03 passS-04 pass
A
ethskills-standards
S-01 passS-03 passS-04 pass
A
ethskills-testing
S-01 passS-03 passS-04 pass
A
ethskills-tools
S-01 passS-03 passS-04 pass
A
ethskills-wallets
S-01 passS-03 passS-04 pass
A
ethskills-why
S-01 passS-03 passS-04 pass
Aeon research · 24
A
aeon-autoresearch
S-01 passS-03 passS-04 pass
A
aeon-deal-flow
S-01 passS-03 passS-04 pass
A
aeon-deep-research
S-01 passS-03 passS-04 pass
A
aeon-defi-monitor
S-01 passS-03 passS-04 pass
A
aeon-defi-overview
S-01 passS-03 passS-04 pass
A
aeon-distribute-tokens
S-01 passS-03 passS-04 pass
A
aeon-hacker-news-digest
S-01 passS-03 passS-04 pass
A
aeon-huggingface-trending
S-01 passS-03 passS-04 pass
A
aeon-last30
S-01 passS-03 passS-04 pass
A
aeon-monitor-kalshi
S-01 passS-03 passS-04 pass
A
aeon-monitor-polymarket
S-01 passS-03 passS-04 pass
A
aeon-monitor-runners
S-01 passS-03 passS-04 pass
A
aeon-narrative-tracker
S-01 passS-03 passS-04 pass
A
aeon-on-chain-monitor
S-01 passS-03 passS-04 pass
A
aeon-paper-pick
S-01 passS-03 passS-04 pass
A
aeon-reg-monitor
S-01 passS-03 passS-04 pass
A
aeon-rss-digest
S-01 passS-03 passS-04 pass
A
aeon-skill-evals
S-01 passS-03 passS-04 pass
A
aeon-skill-repair
S-01 passS-03 passS-04 pass
A
aeon-token-movers
S-01 passS-03 passS-04 pass
A
aeon-token-pick
S-01 passS-03 passS-04 pass
A
aeon-unlock-monitor
S-01 passS-03 passS-04 pass
A
aeon-vuln-scanner
S-01 passS-03 passS-04 pass
A
aeon-skill-security-scan
S-01 passS-03 passS-04 pass
Integrations & community · 52
A
0xwork
S-01 passS-03 passS-04 pass
A
agent-wormhole
S-01 passS-03 passS-04 pass
A
agenticbets
S-01 passS-03 passS-04 pass
A
alchemy★
S-01 passS-03 passS-04 pass
A
berry-juicer
S-01 passS-03 passS-04 pass
A
blueagent
S-01 passS-03 passS-04 pass
A
botchan
S-01 passS-03 passS-04 pass
A
capacitr
S-01 passS-03 passS-04 pass
A
cattown
S-01 passS-03 passS-04 pass
A
checkr
S-01 passS-03 passS-04 pass
A
clanker
S-01 passS-03 passS-04 pass
A
codegrid
S-01 passS-03 passS-04 pass
A
darksol-random-oracle
S-01 passS-03 passS-04 pass
A
endaoment
S-01 passS-03 passS-04 pass
A
ens-primary-name
S-01 passS-03 passS-04 pass
A
erc-8004
S-01 passS-03 passS-04 pass
A
gem-miner
S-01 passS-03 passS-04 pass
A
helixa
S-01 passS-03 passS-04 pass
A
hermesone
S-01 passS-03 passS-04 pass
A
hydrex
S-01 passS-03 passS-04 pass
A
litcoin
S-01 passS-03 passS-04 pass
A
megapot
S-01 passS-03 passS-04 pass
A
moltycash
S-01 passS-03 passS-04 pass
A
neynar
S-01 passS-03 passS-04 pass
A
nookplot
S-01 passS-03 passS-04 pass
A
onchainkit
S-01 passS-03 passS-04 pass
A
opensea
S-01 passS-03 passS-04 pass
A
orlix
S-01 passS-03 passS-04 pass
A
pmfi-parbitrage
S-01 passS-03 passS-04 pass
A
productclank
S-01 passS-03 passS-04 pass
A
qrcoin
S-01 passS-03 passS-04 pass
A
quicknode
S-01 passS-03 passS-04 pass
A
signa
S-01 passS-03 passS-04 pass
A
signals
S-01 passS-03 passS-04 pass
A
siwa
S-01 passS-03 passS-04 pass
A
stakr
S-01 passS-03 passS-04 pass
A
symbiosis
S-01 passS-03 passS-04 pass
A
trails
S-01 passS-03 passS-04 pass
A
trustlayer-sybil-scanner
S-01 passS-03 passS-04 pass
A
veil
S-01 passS-03 passS-04 pass
A
versa
S-01 passS-03 passS-04 pass
A
wake-token-spotter-analysis
S-01 passS-03 passS-04 pass
A
yoink
S-01 passS-03 passS-04 pass
A
zapper
S-01 passS-03 passS-04 pass
A
zerion★
S-01 passS-03 passS-04 pass
A
zyfai
S-01 passS-03 passS-04 pass
A
1claw
S-01 passS-03 passS-04 pass
A
azzle
S-01 passS-03 passS-04 pass
A
hunch
S-01 passS-03 passS-04 pass
A
nexus-trading-labs
S-01 passS-03 passS-04 pass
A
starchild-dao
S-01 passS-03 passS-04 pass
D
gitlawb
S-01 passS-03 passS-04 fail
Agent MCP servers · 7
F
nookplotnpm/@nookplot/mcpC-01 fail · C-02 pass · C-03 pass
decentralized agent-coordination network
A
Blue Agentnpm/@blueagent/skillC-01 pass · C-02 pass · C-03 pass
50-tool stdio MCP server (security OS for agents)
—
gitlawbstdio · gl mcp serve
ships a standard stdio MCP server (24 git/identity tools), but the gl CLI is a precompiled static binary (published as per-platform @gitlawb/gl-linux-* packages) and the server sits behind a gl mcp serve subcommand; litmus launches declared bins bare and its sandbox builds only Node or Python sources, so it cannot reach the server
—
Azzlenpm/@azzle/agents
ships a stdio MCP server (~10 azzle_* tools) inside @azzle/agents at mcp/server.mjs, but that file is a subpath, not the package's declared bin or main, so neither a bare npm ref nor litmus's github build (which derives its start command from the root package manifest) can launch it
—
Noelclawnpm/@noelclaw/mcp
publishes a real 108-tool stdio MCP server, but it does not complete a litmus probe within the harness's 15-minute run budget (it stands up persistent memory, autonomous agents, and scheduled workflows on connect), so every run times out instead of producing a grade
—
1Clawnpm/@1claw/mcp
publishes a real stdio MCP server for its secrets vault, but the bin requires ONECLAW_* auth credentials at startup and exits before the MCP handshake without them, so it is not gradeable from a bare npm ref (there is no way to pass a vault key into a bare-ref grade)
—
VIGILhttps://mcp.vigil.codes
ships a real MCP server, but it is an HTTP/x402 remote service (open source as a Python app at github.com/vigilcodes/vigil-mcp), so there is no stdio initialize handshake for litmus to grade; the live https://mcp.vigil.codes endpoint does not answer one either

Monitor this ecosystem

Monitor the Bankr skill marketplace.

This index is a snapshot. We re-grade Bankr's skills and agent MCP servers on a cadence and flag regressions — a dropped grade, a newly failing check, a changed tool surface — as the marketplace ships. Set up per network.

Start monitoring See the full index

Prefer to write us directly? hello@polygraph.so

Skills: S-01 prompt-injection · S-03 exfil instructions · S-04 dangerous bundled commands (static, content-hash anchored). Reproduce a skill grade with npx -p @polygraphso/litmus polygraphso-litmus-skill <dir>. Agents: behavioral C-01…C-04 on the open harness. Source: BankrBot/skills · bankr.bot/agents.