Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Liquidity Planner

v1.1.0

Plan liquidity provision on PancakeSwap. Use when user says "add liquidity on pancakeswap", "provide liquidity", "LP on pancakeswap", or describes wanting to...

0· 60·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, required binaries (curl, jq) and optional helper tools (cast/open/xdg-open) align with a planner that fetches on-chain and indexer data and generates deep links. The references document expected public APIs (DexScreener, PancakeSwap Explorer, DefiLlama), which fit the stated purpose.
!
Instruction Scope
The SKILL.md tells the agent to run an initialization curl that sends agent name, timestamp, OS and arch to https://pancakeswap.ai/api/ping. That telemetry endpoint (pancakeswap.ai) is not listed in the SKILL.md's allowed curl host list in the security rules, creating an inconsistency. The ping transmits identifying/system info (agent name, OS, arch, timestamp), which is privacy-sensitive and could be used for telemetry or fingerprinting. Otherwise, the instructions limit network calls to relevant public APIs and restrict use of open/xdg-open to pancakeswap.finance URLs, which is appropriate.
Install Mechanism
Install steps use Homebrew formulas for curl, jq, and foundry (cast). Using brew is a typical, low-risk install mechanism; the packages are well-known. Installing curl via brew is redundant on many systems but not harmful. No arbitrary downloads or obscure hosts are used in the install spec.
Credentials
The skill declares no required environment variables or credentials, and its documented API usage is consistent with read-only queries of public endpoints (DexScreener, Explorer, DefiLlama, RPC endpoints). No broad or unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true and makes no requests to modify other skills or system-wide config. It appears to be an invocation-only planner without elevated persistence privileges.
What to consider before installing
Key things to consider before installing: - Telemetry ping: The skill's Step 0 runs a background curl to https://pancakeswap.ai/api/ping sending agent name, timestamp, OS and architecture. Decide whether you are comfortable with that telemetry/fingerprinting. Ask the author why this is needed and whether it can be opt-in or removed. - Domain authenticity: pancakeswap.ai is not the same hostname used elsewhere in the docs (explorer.pancakeswap.com, tokens.pancakeswap.finance). Verify that pancakeswap.ai is an official PancakeSwap domain (check the GitHub repo, DNS ownership, or official project channels) before allowing the ping. - Network policy: If you want to use the skill but limit telemetry, block or monitor requests to pancakeswap.ai (local hosts file, firewall) and confirm the skill still functions with fallback behavior. Run the skill in a sandboxed environment first. - Privacy tradeoffs: The ping leaks an agent identifier and system info; it does not require secrets, but it may create usage logs tied to you. If you need strict privacy, do not install or request removal of the phone-home step. - Ask for clarification: Request the author to (a) add pancakeswap.ai to the documented allowed curl hosts if the ping is intentional and describe its purpose, or (b) remove/opt-in the ping. Also ask whether the skill can operate entirely offline of that endpoint. Given these inconsistencies (telemetry endpoint not listed in allowed hosts and the presence of an unexpected phone-home), treat the skill as suspicious until the author clarifies or removes that behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cc0j235arh45ac87q0tdqax83g0ne

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

OSmacOS · Linux
Binscurl, jq
Any bincast, open, xdg-open

Install

Homebrew
Bins: curl
brew install curl
Homebrew
Bins: jq
brew install jq
Homebrew
Bins: cast
brew install foundry

Comments