Defi Protocol Risk Map
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could mistakenly think wallet access, transaction signing, or sensitive credentials are required, even though the skill says not to provide them.
These signals describe high-impact wallet and credential authority that is not supported by the instruction-only files; if a user or platform interpreted them as needed, that would be overbroad for the skill's stated purpose.
Capability signals: crypto; requires-wallet; can-sign-transactions; requires-sensitive-credentials
Use the skill only as a text-based risk checklist. Do not provide seed phrases, private keys, wallet passwords, signing permissions, or sensitive credentials; the publisher should correct the capability signals if possible.
