Uniswap Manage Liquidity
v0.1.0Add liquidity, remove liquidity, or collect fees on Uniswap V2/V3/V4 pools. Handles the full flow including pool selection, range optimization, approvals, safety checks, and transaction execution. Use when the user wants to LP, provide liquidity, remove a position, or collect accumulated fees.
⭐ 0· 764·0 current·0 all-time
by@wpank
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description match the instructions: add/remove liquidity and collect fees on Uniswap V2/V3/V4. The SKILL.md delegates pool research, safety checks, approvals, simulation, and execution — all expected for a liquidity-manager. Minor inconsistency: README shows install commands referencing a GitHub path, but registry metadata says Source: unknown / Homepage: none.
Instruction Scope
Instructions explicitly call for checking wallet balances, performing approvals (Permit2), simulating and executing transactions, and waiting for confirmations. Those are necessary for the stated purpose, but the SKILL.md does not describe where signing authority or wallet credentials come from, how user confirmation is obtained, or how approvals are gated. That omission grants an agent wide discretion to act on user funds if the platform provides automatic signing or an attached wallet.
Install Mechanism
Instruction-only skill with no install spec or code files—lowest install risk. README mentions optional npx install commands, but the skill itself has no install script or archives to fetch.
Credentials
The skill requires no environment variables or credentials in metadata, yet the runtime flow expects access to a wallet (balances, approvals, transaction execution). The absence of declared primary credential or required env variables (e.g., a signing key, wallet connector token, or instructions to prompt for user signature) is a meaningful omission and should be clarified.
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not request persistent installation privileges or claim to modify other skills or global agent configs.
What to consider before installing
This skill appears to do what it claims (manage Uniswap liquidity), but before installing or invoking it you should confirm how it will sign transactions and access your wallet. Ask the publisher (or the platform) these questions: 1) How are transaction signatures obtained—does the agent prompt you for each signature, use a browser wallet prompt (e.g., MetaMask), or require a long-lived signing token/private key? 2) Where do pool-researcher and liquidity-manager subagents run and what permissions do they have? 3) Is there a safety-guardian or explicit confirmation step before any on-chain transaction and approval? To reduce risk: test on a small amount or testnet first, require explicit per-transaction confirmations, and only enable the skill if signing flows are client-side (your wallet) rather than a stored secret provided to the skill. If the publisher/source remains unknown, treat the skill with extra caution and prefer well-audited alternatives.Like a lobster shell, security has layers — review code before you run it.
latestvk971wagewrmvkbhacse2nqqg4580w5y6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.