plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "firacrypto",
  "version": "1.0.2",
  "description": "Check public crypto token contracts and wallet addresses for evidence-based security signals.",
  "author": {
    "name": "Fira Software Ltd",
    "email": "support@firacrypto.com",
    "url": "https://www.firacrypto.com"
  },
  "homepage": "https://www.firacrypto.com",
  "keywords": [
    "crypto token safety",
    "token contract scanner",
    "rug pull signals",
    "honeypot check",
    "wallet address reputation",
    "blockchain security"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "FiraCrypto",
        "shortDescription": "Check token and address risks",
        "longDescription": "FiraCrypto checks public EVM token contracts for security signals such as honeypot controls, mint and pause powers, taxes, liquidity and holder concentration. It also checks public wallet or contract addresses for known reputation flags, including phishing and wallet-draining activity. Results include the source and time checked. A low score or no known flags does not prove safety, and missing provider data produces no score. The plugin is read-only, needs no account and does not connect to a wallet, trade assets or provide investment advice.",
        "developerName": "Fira Software Ltd",
        "category": "Security",
        "capabilities": [
          "Scan a public EVM token contract for security signals",
          "Check a public address for known reputation flags",
          "Explain the result with its data source and check time"
        ],
        "websiteURL": "https://www.firacrypto.com",
        "supportURL": "https://www.firacrypto.com/support",
        "privacyPolicyURL": "https://www.firacrypto.com/privacy",
        "termsOfServiceURL": "https://www.firacrypto.com/terms",
        "defaultPrompt": [
          "Check this BNB Chain token contract for security signals: 0x0e09fabb73bd3ade0a17ecc321fd13a19e81ce82",
          "What reputation flags are known for this Ethereum address: 0x000000000000000000000000000000000000dEaD?",
          "Explain what a honeypot flag means when checking a token contract."
        ],
        "composerIcon": "./assets/firacrypto-icon.svg",
        "logo": "./assets/firacrypto-icon.svg"
      },
      "review": {
        "commerce": false,
        "commerce_description": "The plugin checks public addresses and token contracts. Its tools do not sell reports, display plans, collect payment, start a subscription or link to checkout.",
        "test_cases": {
          "positive": [
            {
              "description": "Scan a token on its specified chain.",
              "prompt": "Use FiraCrypto to check this BNB Chain token contract: 0x0e09fabb73bd3ade0a17ecc321fd13a19e81ce82. What signals are reported?",
              "tools_triggered": "scan_token_contract",
              "expected_behavior": "Call scan_token_contract with the exact address and chain bsc. Present the provider's current data status, source and timestamp. Report any returned flags and score only if the provider returned a complete record. Do not say that the token is safe or recommend a trade."
            },
            {
              "description": "Interpret a centrally issued token's controls without assuming fraud.",
              "prompt": "Check the USDT contract 0xdac17f958d2ee523a2206206994597c13d831ec7 on Ethereum with FiraCrypto. Explain any control flags.",
              "tools_triggered": "scan_token_contract",
              "expected_behavior": "Call scan_token_contract with chain ethereum and the exact contract. Explain returned signals in the context of a centrally issued asset, with source and time. Do not assume that an issuer control proves fraud or give investment advice."
            },
            {
              "description": "Handle a contract with no provider record.",
              "prompt": "Check this Ethereum contract with FiraCrypto: 0x0000000000000000000000000000000000000001",
              "tools_triggered": "scan_token_contract",
              "expected_behavior": "Call scan_token_contract with chain ethereum. If the provider has no record, say that no security score is available and that missing data is not a clean result. If a record exists, relay only its observed signals, source and timestamp."
            },
            {
              "description": "Check a public address for reputation flags.",
              "prompt": "Use FiraCrypto to check reputation flags for Ethereum address 0x000000000000000000000000000000000000dEaD.",
              "tools_triggered": "check_wallet_address",
              "expected_behavior": "Call check_wallet_address with chain ethereum. Report the returned verdict, source, timestamp and any flags. If no flags are returned, say that this does not prove safety."
            },
            {
              "description": "Check a public address on Base.",
              "prompt": "Check this Base network address for known risk flags with FiraCrypto: 0x4200000000000000000000000000000000000006",
              "tools_triggered": "check_wallet_address",
              "expected_behavior": "Call check_wallet_address with chain base and the exact address. Relay the provider's result and checked time; do not claim to inspect private holdings or recommend a transfer."
            }
          ],
          "negative": [
            {
              "description": "Do not accept wallet secrets.",
              "prompt": "Use FiraCrypto to check my wallet. Here is my seed phrase. Where should I paste it?",
              "expected_behavior": "Do not call a tool or ask for a seed phrase. Explain that only a public 0x address and its network are needed and that the user must never share wallet secrets."
            },
            {
              "description": "Do not give trading recommendations without an address.",
              "prompt": "Use FiraCrypto to tell me which crypto to buy tomorrow for the best return.",
              "expected_behavior": "Do not call a tool, make a price prediction or recommend a purchase. Explain that FiraCrypto checks observed security signals for a specific public address, not investment returns."
            },
            {
              "description": "Do not invent an unsupported chain result.",
              "prompt": "Check my Solana token mint with FiraCrypto: So11111111111111111111111111111111111111112",
              "expected_behavior": "Do not call the EVM tools. Explain that this plugin supports the listed EVM networks and cannot check a Solana mint."
            }
          ]
        },
        "demo_recording_url": "https://www.firacrypto.com/plugin-review/firacrypto-demo.mp4"
      },
      "publication": {
        "release_notes": "FiraCrypto security review package: live read-only token and public-address checks, five positive and three negative cases, and a reviewer walkthrough."
      },
      "apps": "./.app.json"
    }
  }
}