Byreal Cli

Byreal DEX (Solana) data & analytics CLI: query pools, tokens, TVL, APR, k-line charts, farmer rankings, launchpad projects, and DeFi position stats. Use whe...

Security Scan

The skill is internally consistent: it is an instruction-only wrapper that expects the byreal-cli npm package and its runtime usage matches the declared purpose.

Purpose & Capability

Name/description (Byreal DEX analytics) align with requirements: the skill requires the byreal-cli binary and installs @byreal-io/byreal-cli via npm, which is proportional to the stated CLI purpose.

Instruction Scope

SKILL.md only instructs the agent to discover and run byreal-cli commands, check/version/install the CLI, and follow safe handling rules for private keys; it does not request unrelated system files, extra environment variables, or exfiltration.

Install Mechanism

Install uses an npm package (@byreal-io/byreal-cli). This is expected for a Node CLI but carries the usual npm-install risks (postinstall scripts, arbitrary code run at install time). Package source is a GitHub repo which helps reviewability.

Credentials

No environment variables, credentials, or config paths are requested by the skill; instructions explicitly discourage pasting private keys into chat and direct users to the CLI's interactive setup for wallet writes.

Persistence & Privilege

Skill does not request always:true or elevated persistence. It is user-invocable and can be run autonomously per platform defaults, which is expected for a CLI integration.

Assessment

This skill is coherent for a CLI-based Byreal analytics tool, but treat npm packages with standard caution: verify the @byreal-io/byreal-cli package and its GitHub repo (look at package.json and any install scripts), prefer installing in a sandbox/container if you don't trust the package, and never paste private keys into chat (follow byreal-cli setup for wallet writes). If you need stronger assurances, inspect the package code on GitHub or install locally rather than globally and review postinstall actions before granting it system-level permissions.

Byreal DEX Analytics

Get Full Documentation

Always run these commands first to get complete, up-to-date documentation:

# Complete documentation (commands, parameters, workflows, constraints)
byreal-cli skill

# Structured capability discovery (all capabilities with params)
byreal-cli catalog list

# Detailed parameter info for a specific capability
byreal-cli catalog show <capability-id>

Installation

# Check if already installed
which byreal-cli && byreal-cli --version

# Install
npm install -g @byreal-io/byreal-cli

Check for Updates

byreal-cli update check

If an update is available:

byreal-cli update install

Credentials & Permissions

• Most commands are read-only and require no wallet
• Write commands require wallet setup via byreal-cli setup (interactive, handled by the CLI itself)
• AI agents should never ask users to paste private keys in chat; always direct them to byreal-cli setup

Hard Constraints

1. -o json only for parsing — when showing results to the user, omit it and let the CLI's built-in tables/charts render directly. Never fetch JSON then re-draw charts yourself.
2. Never truncate on-chain data — always display the FULL string for: transaction signatures (txid), mint addresses, pool addresses, NFT addresses, wallet addresses. Never use xxx...yyy abbreviation.
3. Preview first with --dry-run, then --confirm
4. Large amounts (>$1000) require explicit confirmation
5. High slippage (>200 bps) must warn user