ClawHub

Swap Integration

v1.0.0

Integrate PancakeSwap swaps into applications. Use when user says "integrate swaps", "pancakeswap", "smart router", "add swap functionality", "build a swap f...

⭐ 0· 80·0 current·0 all-time
by@pcs-bot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (PancakeSwap swap integration) matches the SKILL.md content. Required binaries (curl, jq) are reasonable for calling Routing APIs and processing JSON; optional bins (cast/foundry, node, python3) align with smart-contract interaction and SDK usage. No suspicious or unrelated credentials, files, or paths are requested.
ℹ
Instruction Scope
SKILL.md is an instruction-only integration guide that shows RPC endpoints, token addresses, SDK usage, and methods for constructing/sending swaps. This naturally involves making network calls (Routing API, RPC) and may show how to build or sign transactions. The metadata does not request private keys or other secrets, but practical use (signing or broadcasting transactions) will require the user to supply keys or wallet interactions — the guide may prompt or instruct how to handle keys. The instructions do not appear to ask the agent to read unrelated system files or exfiltrate unrelated data.
✓
Install Mechanism
Install spec uses brew formulas (curl, jq, foundry). Installing via Homebrew is a standard, low-risk mechanism and the formulas match the declared required binaries. No arbitrary URL downloads or archive extraction are present.
✓
Credentials
The skill declares no required environment variables or credentials, which is proportional to a documentation/integration guide. It references public RPC endpoints and SDK tooling; there are no unexplained secrets or multiple unrelated credential requirements.
✓
Persistence & Privilege
always:false (default) and no config paths or persistent system modifications are requested. The skill may run commands and network requests at runtime (allowed-tools includes WebFetch and Bash(curl:*)), which is normal for an integration helper. It does not demand permanent agent inclusion or cross-skill config changes.
Assessment
This skill appears to be a coherent PancakeSwap integration guide. Before installing: 1) Verify the authored source (homepage points to a PancakeSwap repo) and review the SKILL.md content yourself. 2) Expect the agent to run network calls and shell commands (curl, jq, cast) — these are necessary for quoting and contract interactions. 3) Never paste private keys or long-lived secrets into prompts; when signing transactions prefer a wallet/hardware signer or ephemeral keys and test on BSC Testnet first. 4) Homebrew installs are standard but review what will be installed; if you don't want tooling like foundry/cast on your machine, decline that install. 5) If you are concerned about autonomy, keep the skill user-invocable only (it is not always:true) or disable autonomous invocation in your agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk974tkgw6mhm3ycqrrd693yyzx83g03b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

OSmacOS · Linux
Binscurl, jq
Any bincast, python3, node, open, xdg-open

Install

Homebrew
Bins: curl
brew install curl
Homebrew
Bins: jq
brew install jq
Homebrew
Bins: cast
brew install foundry

Comments