chain-forensics
On-chain analysis and transaction forensics for blockchain security investigations. Provides capabilities for tracing fund flows, identifying suspicious patterns, MEV analysis, and generating forensic reports for incident response.
npx skills add a5c-ai/babysitter --skill chain-forensics --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Chain Analysis/Forensics Skill Expert on-chain analysis and transaction forensics for security investigations and incident response. ## Capabilities - **Transaction Tracing**: Follow fund flows across addresses and protocols - **Pattern Detection**: Identify suspicious patterns (wash trading, rugpulls, sandwich attacks) - **MEV Analysis**: Analyze MEV activity and flashbots bundles - **Address Clustering**: Group related addresses and identify ownership - **Cross-Chain Tracking**: Track bridged assets across chains - **Forensic Reports**: Generate detailed investigation reports ## MCP/Tool Integration | Tool | Purpose | Reference | |------|---------|-----------| | **Phalcon MCP** | Transaction analysis, exploit detection | [phalcon-mcp](https://github.com/mark3labs/phalcon-mcp) | | **whale-tracker-mcp** | Large transaction monitoring | [whale-tracker](https://github.com/kukapay/whale-tracker-mcp) | | **bicscan-mcp** | Address risk scoring | [bicscan](https://github.com/ahnlabio/bicscan-mcp) | | **dune-analytics-mcp** | Custom queries, analytics | [dune](https://github.com/kukapay/dune-analytics-mcp) | | **Etherscan MCP** | Block explorer data | [etherscan](https://github.com/haom
- Capabilities
- MCP/Tool Integration
- Transaction Tracing
- Basic Flow Analysis
- Tracing with Tenderly/Phalcon
- Address Analysis
- Profile Building
- Clustering Heuristics
- MEV Analysis
- Sandwich Attack Detection
- Flashbots Bundle Analysis
- Suspicious Pattern Detection
- Rugpull Indicators
- Wash Trading Detection
Get transaction details cast tx 0xTxHash --rpc-url $RPC Decode transaction input cast 4byte-decode $(cast tx 0xTxHash --rpc-url $RPC | grep input) Get internal transactions via Etherscan API curl "https://api.etherscan.io/api?module=account&action=txlistinternal&txhash=0xTxHash&apikey=$KEY"
What does the chain-forensics skill do?
On-chain analysis and transaction forensics for blockchain security investigations. Provides capabilities for tracing fund flows, identifying suspicious patterns, MEV analysis, and generating forensic reports for incident response.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill chain-forensics --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.
