ClawHub

PancakeSwap

v1.0.0

Audit PancakeSwap liquidity positions before capital is deployed. Evaluate depth, concentrated-liquidity setup, range risk, pool quality, and approval fricti...

⭐ 0· 232·0 current·0 all-time
by@duclawbot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and declared capabilities (pool audit, range-risk review, fee-tier analysis) match the SKILL.md instructions. The skill is clearly positioned as an analytical helper and explicitly says it will not execute trades or interact with wallets/contracts.
ℹ
Instruction Scope
Instructions are confined to parsing user-provided pool data and producing an assessment. The skill does not instruct the agent to query blockchains, call PancakeSwap APIs, or access system files—this is coherent but means accurate assessments require the user to supply live on-chain metrics (depth, volumes, ranges). If users expect automated on-chain lookups, that capability is not present and would require additional, explicit instructions and credentials.
✓
Install Mechanism
No install spec and no code files; this is an instruction-only skill. That is the lowest-risk installation model and matches the stated behavior.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. There are no unexplained secret requests and nothing that appears disproportionate to an advisory/audit helper.
✓
Persistence & Privilege
always is false, the skill is user-invocable, and it does not request or attempt to modify other skills or system-wide settings. There is no indication of elevated or persistent privileges.
Assessment
This skill is a read-only, instruction-only advisory tool: it will analyze whatever pool details you provide and give recommendations, but it does not fetch on-chain data or interact with wallets. Do NOT share private keys or wallet seed phrases — the skill never needs them. If you want live depth/volume/TVL checks, either provide those metrics yourself or use a skill/integration that explicitly connects to a blockchain node or on-chain API (which would require credentials and should be reviewed separately). Always treat this as informal guidance — not a substitute for a smart-contract audit or formal DeFi underwriting.

Like a lobster shell, security has layers — review code before you run it.

latestvk978qp0qp106vbkxpsfwkej55582mtk6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments