Agent skill · Security

chain-forensics

On-chain analysis and transaction forensics for blockchain security investigations. Provides capabilities for tracing fund flows, identifying suspicious patterns, MEV analysis, and generating forensic reports for incident response.

a5c-aigithub.com/a5c-aiGitHub ↗
claude-codecodexcan modify filesMIT
Install
npx skills add a5c-ai/babysitter --skill chain-forensics --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 2
SKILL.md size: 9 KB
Bundled scripts: none
Allowed tools: ReadGrepWriteBashEditGlobWebFetchWebSearch
Path: library/specializations/cryptography-blockchain/skills/chain-forensics/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 1,642
Language: JavaScript

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Chain Analysis/Forensics Skill Expert on-chain analysis and transaction forensics for security investigations and incident response. ## Capabilities - **Transaction Tracing**: Follow fund flows across addresses and protocols - **Pattern Detection**: Identify suspicious patterns (wash trading, rugpulls, sandwich attacks) - **MEV Analysis**: Analyze MEV activity and flashbots bundles - **Address Clustering**: Group related addresses and identify ownership - **Cross-Chain Tracking**: Track bridged assets across chains - **Forensic Reports**: Generate detailed investigation reports ## MCP/Tool Integration | Tool | Purpose | Reference | |------|---------|-----------| | **Phalcon MCP** | Transaction analysis, exploit detection | [phalcon-mcp](https://github.com/mark3labs/phalcon-mcp) | | **whale-tracker-mcp** | Large transaction monitoring | [whale-tracker](https://github.com/kukapay/whale-tracker-mcp) | | **bicscan-mcp** | Address risk scoring | [bicscan](https://github.com/ahnlabio/bicscan-mcp) | | **dune-analytics-mcp** | Custom queries, analytics | [dune](https://github.com/kukapay/dune-analytics-mcp) | | **Etherscan MCP** | Block explorer data | [etherscan](https://github.com/haom

What's inside
Steps it walks through
  1. Capabilities
  2. MCP/Tool Integration
  3. Transaction Tracing
  4. Basic Flow Analysis
  5. Tracing with Tenderly/Phalcon
  6. Address Analysis
  7. Profile Building
  8. Clustering Heuristics
  9. MEV Analysis
  10. Sandwich Attack Detection
  11. Flashbots Bundle Analysis
  12. Suspicious Pattern Detection
  13. Rugpull Indicators
  14. Wash Trading Detection
Ships with 1 file
  • README.md
Commands it runs
Get transaction details
cast tx 0xTxHash --rpc-url $RPC
Decode transaction input
cast 4byte-decode $(cast tx 0xTxHash --rpc-url $RPC | grep input)
Get internal transactions via Etherscan API
curl "https://api.etherscan.io/api?module=account&action=txlistinternal&txhash=0xTxHash&apikey=$KEY"
More from babysitter
All skills →
About this skill
What does the chain-forensics skill do?

On-chain analysis and transaction forensics for blockchain security investigations. Provides capabilities for tracing fund flows, identifying suspicious patterns, MEV analysis, and generating forensic reports for incident response.

How do I install it?

Run `npx skills add a5c-ai/babysitter --skill chain-forensics --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going