Defi Sniper
WarnAudited by ClawScan on May 10, 2026.
Overview
This is a coherent DeFi trading skill, but it can use wallet-signing authority and auto-execute irreversible crypto trades through external skills, so it deserves careful review before use.
Only install this if you are comfortable delegating limited DeFi trading authority. Use a separate low-balance wallet, avoid private-key fallback, start in observe or paper mode, require manual confirmation for live trades, pin and inspect upstream skills, and do not run broad update commands unless you understand their impact.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could spend the configured wallet or vault funds on volatile token trades, and blockchain transactions are generally irreversible.
The skill permits an automated live trading mode that can execute swaps once gates pass, without requiring a final per-transaction confirmation in that mode.
`execution_policy`: `manual-confirm` or `auto-with-guardrails` ... If execution allowed: - enforce position cap ... - enforce slippage cap - record tx hash and rationale
Use observe or paper mode first, prefer manual-confirm for live trades, require a final transaction preview before signing, and set very small hard caps.
If misconfigured, over-permissioned, or compromised, these credentials could allow loss of funds from the connected wallet or vault.
The skill expects signing or vault authority capable of authorizing transactions, including a private-key fallback, which is materially more sensitive than simple read-only API access.
Minara signer path: Circle Wallet preferred, or chain private-key fallback per Minara docs. ... Torch vault path: `VAULT_CREATOR` and linked agent wallet for vault-routed operations.
Use a dedicated low-balance wallet or vault, avoid private-key fallback where possible, restrict scopes and funding, and never connect a primary wallet.
The installed or updated upstream skills could differ from the versions described here and may receive trading credentials or execute transactions.
The setup uses latest-version installs and a broad update-all command for external skills that are not included in this artifact review, while the skill may later use them for live trading.
npx -y clawhub@latest install minara npx -y clawhub@latest install torchmarket npx -y clawhub@latest install torchliquidationbot npx -y clawhub@latest update --all
Inspect and pin the exact upstream skill versions before use, install only the required skills, and avoid `update --all` unless you intend to update every installed skill.
If configured to run unattended, related tooling could continue monitoring or acting beyond a single manual request.
The skill references an upstream component designed for continuous scanning and fast execution, although it also warns that it is not a generic buy/sell sniper by default.
Torch Liquidation Bot ... - continuous scan loop, - high-speed vault-routed transaction execution patterns, - strict vault safety boundary.
Ensure any continuous bot process has explicit start/stop controls, dry-run testing, spending limits, and monitoring alerts.