ClawHub

farmdash futures strategist

v1.0.4

Adaptive Hyperliquid perps execution engine for OpenClaw. Researches funding, trend, liquidity, regime, and account context; returns strategy objects with pr...

⭐ 0· 169·0 current·0 all-time
byParm@parmasanandgarlic
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires walletRequires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (futures strategist for Hyperliquid) match the declared network endpoints, OpenAPI contract, and a single primary credential (FARMDASH_API_KEY) used only to gate analysis/tiers. No unrelated services, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md contains precise runtime instructions: research endpoints, require an on‑device EIP‑712 signature for execution, and a fixed set of allowed URLs. It explicitly forbids requesting private keys or bearer tokens to replace signatures. The scope stays within market research, sizing, and zero‑custody order flow.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files to write to disk — lowest-risk distribution model. The included openapi.yaml is a benign API contract for the described endpoints.
✓
Credentials
The only declared primary credential is FARMDASH_API_KEY, which is appropriate for a tiered analysis/execution service. The SKILL.md documents scout mode that operates without a key. No unrelated secrets or multiple credentials are requested.
✓
Persistence & Privilege
Skill is not marked always:true, does not request system-level persistence, and has normal autonomous invocation defaults. It does not modify other skills or system configs according to the provided materials.
Assessment
This skill appears coherent and focused on zero‑custody futures research and EIP‑712 order flow. Before installing: 1) Confirm you will never paste private keys or seed phrases into the agent and that you will sign orders locally with your Hyperliquid API wallet. 2) Only provide a FARMDASH_API_KEY scoped to the tier you intend to use (Scout/Pioneer/Syndicate) and avoid granting a high‑tier token unless you need execution/cancel capabilities. 3) Verify the endpoints (https://farmdash.one and Hyperliquid API) are correct for your environment. 4) If you are cautious about autonomous trading, consider disabling autonomous invocation for this skill or require explicit user confirmation for any execute_perp_order/cancel_perp_order calls. If you want higher assurance, request or inspect runtime logs showing intentHash/expiresAt usage and that EIP‑712 payloads are handled client‑side.

Like a lobster shell, security has layers — review code before you run it.

latestvk977bn6wmxh8c6zdjwqg3m8wcd84gmwv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Primary envFARMDASH_API_KEY

Comments