Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Liquidity

Analyze liquidity operations. Use when you need to understand liquidity mechanisms, evaluate protocol security, or reference on-chain concepts.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 16 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The README/metadata advertise 'Analyze liquidity operations' and 'evaluate protocol security', but the actual deliverable is a minimal shell script that acts as a local journal/CRUD tool (add/list/search/remove/export/stats) with no blockchain queries, on‑chain analysis, network calls, or tooling for protocol security. This is a clear mismatch between claimed purpose and provided capability.
Instruction Scope
SKILL.md instructs the agent to run scripts/script.sh with commands like status/add/list/etc. Those commands only read/write files under a configurable data directory (default: ~/.liquidity). The instructions do not request other environment variables or read unrelated files, nor do they transmit data externally. They do grant the agent permission to create/modify files in the user's home directory.
Install Mechanism
No install spec; the skill is instruction-only plus a bundled script. Nothing is downloaded or installed from external URLs, so there is no runtime fetch of arbitrary code.
Credentials
The skill requires no credentials or specific environment variables. It does honor an optional LIQUIDITY_DIR env var (documented in SKILL.md). The amount and type of environment access requested is proportionate to the script's actual behavior.
Persistence & Privilege
always is false and the skill does not alter other skills or global agent configuration. Its persistence is limited to creating a directory and files under the user's home (default ~/.liquidity). Autonomous invocation is allowed by platform default; combined with the purpose mismatch this elevates the need for caution but on its own is expected.
What to consider before installing
This skill's description promises on‑chain analysis and protocol security evaluation, but the code only implements a local note/entry manager that writes to ~/.liquidity (or a directory you set via LIQUIDITY_DIR). Before installing, decide if that mismatch is acceptable. If you expect real blockchain analysis, this skill will not provide it. Review the script to confirm you’re comfortable letting the agent run it (it will create and modify files under your home directory and does not sanitize inputs fully). Avoid storing secrets or private keys via this tool. If you want to use it, consider setting LIQUIDITY_DIR to a dedicated folder and disable autonomous invocation for the agent (if your platform permits) until you’re confident in how it will be used.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97b6yetmeffhwenq97ewt4erh83a8jt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Liquidity

Analyze liquidity operations. Use when you need to understand liquidity mechanisms, evaluate protocol security, or reference on-chain concepts.

When to Use

  • status: Show current status
  • add: Add new entry
  • list: List all entries
  • search: Search entries
  • remove: Remove entry by number
  • export: Export data to file
  • stats: Show statistics
  • config: View or set config

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to customize behavior.

VariableDescription
LIQUIDITY_DIRData directory (default: ~/.liquidity/)

Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…