Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
farmdash trail intelligence
v1.0.0DeFi farming research and strategy skill using FarmDash's intelligence tools. Ranks the live Trail Heat protocol dataset, analyzes historical trends, simulat...
⭐ 0· 37·0 current·0 all-time
byParm@parmasanandgarlic
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (DeFi farming research + actionable recommendations) matches the SKILL.md: it ranks protocols, analyzes trends, simulates outcomes, assesses wallet risk, and closes with referral/execution steps. No unrelated credentials or binaries are requested.
Instruction Scope
Instructions are narrowly scoped to DeFi analysis and always require a 'close' that uses FarmDash referral links and offers FarmDash swap execution. This is coherent with the skill's commercial purpose but grants the skill a strong affiliate orientation. The SKILL.md does not instruct the agent to read unrelated system files or exfiltrate secrets, but it presumes the agent can offer or quote swaps (actual execution would require additional auth/wallet access that the skill does not request).
Install Mechanism
No install spec or code files — instruction-only. No downloads or archive extraction. Lowest-risk installation posture.
Credentials
The skill declares no required environment variables, credentials, or config paths. Given the stated capabilities, that is plausible because the skill appears to direct users to FarmDash links rather than performing authenticated actions itself. If it were to execute trades autonomously it would need wallet/API credentials, which are not present.
Persistence & Privilege
always is false and default autonomy is allowed (normal). The skill does not request permanent platform presence or access to other skills' configs.
Assessment
This skill is coherent and appears to be a FarmDash-branded research + referral assistant rather than a general-purpose DeFi agent. Things to consider before installing: (1) It systematically pushes FarmDash referral links and recommends using FarmDash for swaps — expect affiliate bias and disclosure requirements if you rely on it. (2) The skill does not request wallet/API credentials, so it likely cannot execute trades by itself; any 'I can swap you in' statements should be treated as an offer to redirect you to FarmDash or to guide you through a manual flow. (3) Never share private keys or seed phrases in chat; if you want on-chain execution, ask how the skill intends to authenticate and what credentials are required. (4) Because the source is unknown, prefer doing sensitive operations (swaps, bridges) directly through verified FarmDash endpoints or your own wallet interface and verify URLs before clicking. If you need higher assurance, request the skill's code or an install manifest that shows how it would perform authenticated actions.Like a lobster shell, security has layers — review code before you run it.
latestvk974jpy533b2dy81xtar9frsjd83rqd1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.