AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor oracle signals — all from chat. Deployed on Ethereum Sepolia with verified contracts. Use this skill when users ask about DeFi liquidity provision, Uniswap v4 hooks, pool management, LP positions, impermanent loss, or automated market making.

• Outcome: Review
• Latest audit: Jul 10, 2026 · 4:43 AM UTC
• Version: 1.0.0

Overview

This testnet Uniswap skill is review-worthy because it can sign blockchain transactions and includes a public fallback private key that may be used without the user's knowledge.

Review before installing. Use only an isolated Sepolia setup, do not fund or trust the packaged deployer account, remove the fallback private key, require DEPLOYER_PRIVATE_KEY explicitly from a secure environment, rotate any roles or assets tied to the exposed account, and confirm every on-chain action before running the scripts.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

Context-Inappropriate Capability

High

• Confidence: 99% confidence
• Finding: The file hardcodes a usable fallback private key via `process.env.DEPLOYER_PRIVATE_KEY || "0x..."`, which means anyone with access to the repository or packaged skill can derive the wallet and sign transactions. In a DeFi liquidity-management skill, this is especially dangerous because the configured wallet client is directly wired for onchain actions, enabling theft of funds, unauthorized contract interaction, impersonation of the bot, and operational compromise if the key controls any assets or privileged roles.

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The skill description is broad enough to trigger on general DeFi, liquidity provision, AMM, and impermanent loss questions, not just requests to use this specific Sepolia automation tool. Because the skill can instruct the agent to run local scripts that interact with blockchain wallets and contracts, unintended activation increases the chance of unnecessary tool execution, confusing users, or performing sensitive blockchain actions in contexts where the user only wanted informational guidance.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The embedded fallback key is silently used with no warning, so deployments may unintentionally run with a publicly exposed credential instead of an operator-provided secret. Because this skill manages blockchain positions and creates a wallet client automatically, the hidden fallback increases the chance of accidental production use of a compromised account and makes misuse easier for attackers who know the default key.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"type": "module",
  "private": true,
  "dependencies": {
    "viem": "^2.20.0"
  }
}

• Confidence: 88% confidence
• Finding: "viem": "^2.20.0"

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.