Back to OScope

Verify OScope with AI

Have an AI read every line before you install anything. Everything here opens without a login, a script or JavaScript, so any AI that can read a web page can check it: Claude, ChatGPT, Gemini, or an agent on your computer.

1 Copy this into your AI

Check the open source project OScope for me before I install it.

Its code (one page per file):   https://git.oscope.trade/oscope
Every text file in one page:     https://git.oscope.trade/oscope/ai.txt
SHA-256 of every file:           https://git.oscope.trade/oscope/manifest.json
What the project says it does:   https://git.oscope.trade/oscope/raw/main/SAFETY.md
Commit: 9d9eae4d711c8575b6fbb4d882cc53b3af7dc798

Read all of the code. Do not run anything. Then tell me in plain words:

1. Does it ever ask for, read, store or send a private key, a seed phrase or a wallet file?
   Can it sign or send a transaction?
2. Every internet address it connects to, and what for.
3. Does it read or write any file outside its own folder?
4. Does anything run at install time (install scripts in package.json, in its dependencies, in .npmrc)?
   How many dependencies does it have and what are they?
5. Does it only listen on my own computer (127.0.0.1) unless I change that?
6. Is anything hidden: scrambled code, encoded text, code downloaded at run time, eval?

Compare what you found with SAFETY.md. If the code does anything SAFETY.md does not say,
or anything looks wrong or unclear, say so first and tell me not to install it.

2 An AI that runs commands can check the files are the same

# the code, and the commit it is built from
git clone https://git.oscope.trade/oscope.git
cd oscope
git rev-parse HEAD      # prints 9d9eae4d711c8575b6fbb4d882cc53b3af7dc798

# every file against the published list of hashes
curl -s https://git.oscope.trade/oscope/SHA256SUMS | sha256sum -c --quiet && echo "all files match"

3 What a clean result looks like

  • No private key, seed phrase or wallet file is asked for, read or stored. Nothing signs or sends a transaction.
  • Connections: the public PumpApi trade stream, public SOL price pages, and the pictures of the coins you open.
  • Nothing runs at install: three exact dependencies (ws, lightweight-charts, fancy-canvas), install scripts off in .npmrc.
  • The server listens on 127.0.0.1 only. No encoded or downloaded code, no eval.
  • Everything matches SAFETY.md, which names the file behind every point.