Skills writing-bots
๐Ÿ“ฆ

writing-bots

Content revision r2 High Risk โš™๏ธ External commands๐ŸŒ Network access๐Ÿ”‘ Env variables

Build Safer Silverback Blockchain Bots

Blockchain event bots require precise triggers, network settings, and safety controls. This skill guides Silverback bot design, project structure, testing, and operation.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "writing-bots" from https://skillstore.io/skills/apeworx-writing-bots.md and its manifest at https://skillstore.io/api/skills/apeworx-writing-bots/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "writing-bots". Monitor token transfer events on a testnet and alert an operations channel.

Expected outcome:

A project plan with an event-log trigger, contract configuration, structured alerts, deduplication, logging, and a testnet verification checklist.

Using "writing-bots". Submit a maintenance transaction when a liquidity metric falls below a threshold.

Expected outcome:

A guarded workflow with metric calculation, dry-run mode, signer checks, transaction limits, circuit-breaker conditions, and operator approval.

Using "writing-bots". Review an existing bot before enabling it on mainnet.

Expected outcome:

A risk review covering contract addresses, network selection, state handling, duplicate events, signer permissions, spending limits, observability, and shutdown procedures.

Security Audit

High Risk
v9 โ€ข 7/23/2026 Open versioned report

Most static findings are false positives caused by Markdown formatting or benign environment variable examples. Confirmed findings cover remote documentation fetches, third-party installation, and bot execution; semantic review also identified irreversible blockchain actions and tolerance of unresolved failures.

1
Files scanned
131
Lines analyzed
5
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Generated Bot Can Perform Irreversible Blockchain Actions
The workflow can create and run handlers that sign and broadcast transactions. Mainnet execution may cause irreversible financial or contract state changes.
The skill explicitly lists signed transaction broadcasting as a handler action and provides a command that can target ethereum:mainnet.
Medium
Unresolved Failures May Be Accepted During Testing
The skill says continued testing may be acceptable when failures remain unexplained. Faulty blockchain automation can repeat unintended actions or hide unsafe state handling.
The guidance directly permits continued testing despite unresolved failures, although it does not recommend production deployment in that state.
Capability review items (5)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
```bash
The cited fenced block instructs the agent to run uv tool install silverback. Installing an unpinned third-party package executes externally supplied code.
Medium
Ruby/shell backtick execution
```bash
The cited Bash block runs the generated bot against a user-selected blockchain network. Executing generated automation can trigger network and signer side effects.
Low
Hardcoded URL
1. Use `web_fetch` to retrieve the latest documentation from https://docs.apeworx.io/silverback/stab
The skill explicitly requires fetching content from the hardcoded documentation host. The official destination limits risk, but remote content remains mutable.
Low
Hardcoded URL
- Development guide: https://docs.apeworx.io/silverback/stable/userguides/development
This URL is listed as a page the agent should fetch. It creates an outbound dependency on mutable remote documentation.
Low
Hardcoded URL
- API reference: https://docs.apeworx.io/silverback/stable/methoddocs
This API reference URL is another explicit fetch target. The domain is official, but the response is external and mutable.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/apeworx-writing-bots/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/apeworx-writing-bots/security.svg)](https://skillstore.io/skills/apeworx-writing-bots?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/apeworx-writing-bots?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/apeworx-writing-bots/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/apeworx-writing-bots.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

ApeWorX. (2026). writing-bots security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/apeworx-writing-bots/audits/9

BibTeX citation

@techreport{apeworx-apeworx-writing-bots-2026, author = {ApeWorX}, title = {writing-bots security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/apeworx-writing-bots/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "writing-bots security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "ApeWorX" date-released: "2026-07-23" url: "https://skillstore.io/skills/apeworx-writing-bots/audits/9" identifiers: - type: other value: "skillstore:apeworx-writing-bots:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Monitor Contract Events

Design a bot that watches contract logs and sends controlled notifications or backend requests.

Automate Protocol Operations

Plan guarded transaction handlers with signer checks, balance limits, and emergency stops.

Track On-Chain Metrics

Define derived metrics and trigger actions when volume, balances, or other signals cross thresholds.

Try These Prompts

Plan a Basic Event Bot
Plan a Silverback bot that watches [network] for [contract event] and sends [notification]. Ask for missing requirements before proposing the project.
Draft a Testnet Bot
Draft a Silverback bot for [testnet] that monitors [contract] and records [metric]. Include project files, logging, limits, and circuit-breaker behavior.
Design a Multi-Action Bot
Design a Silverback bot that reacts to [trigger] with [off-chain action] and [transaction]. Separate dry-run, testnet, and signer-enabled modes.
Review and Harden a Bot
Review this Silverback bot for [network]: [requirements or existing design]. Identify failure modes, state assumptions, spending limits, monitoring, and recovery procedures.

Best Practices

  • Confirm network, contracts, triggers, actions, and prohibited scenarios before implementation.
  • Test without a signer, then use testnet before considering funded mainnet operation.
  • Add explicit limits, idempotency, logs, alerts, and circuit-breaker conditions.

Avoid

  • Do not install packages or run generated bots without explicit user confirmation.
  • Do not enable a signer before reviewing transaction logic and spending boundaries.
  • Do not continue privileged testing while failures or state inconsistencies remain unexplained.

Frequently Asked Questions

What does this skill create?
It guides the design and implementation of Python bots using the Silverback SDK.
Which blockchain events can it handle?
It covers new blocks, contract event logs, scheduled jobs, and metric thresholds.
Can it submit transactions?
Yes. Transaction handlers require careful signer controls, limits, testnet validation, and explicit approval.
Does it install Silverback automatically?
The source provides an installation command. Users should review and approve package installation before execution.
Can it deploy directly to mainnet?
It can target selected networks, but funded mainnet use should follow dry-run and testnet validation.
Does it audit smart contracts?
No. It uses contract interfaces but does not replace contract security review or protocol risk analysis.

Developer Details

Author

ApeWorX

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

89edfdc710d0846129dcee6a929477b04f08052c

Maintenance freshness

7/24/2026

Usage

5 downloads ยท 221 views

File structure

๐Ÿ“„ SKILL.md