ClawHub

Preflyte

v1.0.1

Financial intelligence layer for DeFi agents. One API call tells you where to deploy capital, which chains are viable for your budget, and whether your marke...

⭐ 1· 45·0 current·0 all-time
by@hayespeter
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description, required binary (curl), and single env var (PREFLYTE_API_KEY) match a service that exposes an HTTP API for DeFi intelligence. Nothing requested (no wallet keys, no cloud creds, no system paths) appears unrelated to the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to call preflyte API endpoints (e.g., api.preflyte.xyz, mcp.preflyte.xyz) and to register for/store a PREFLYTE_API_KEY. That is expected for a web-API integration. Caveat: using the skill will send portfolio/trade/context data to an external service — the document claims 'read-only' and 'no wallet access', but agents will still transmit whatever observational/trade parameters you provide, which may be sensitive.
✓
Install Mechanism
Instruction-only skill with no install spec and only a dependency on curl. This is low-risk from an installation/extraction perspective (nothing is downloaded or written by an installer).
✓
Credentials
Only a single API key (PREFLYTE_API_KEY) is required and it's declared as the primary credential; this is proportionate for a hosted API. The skill does not request unrelated credentials or system config paths.
✓
Persistence & Privilege
always is false and the skill is user-invocable; autonomous invocation is allowed by default on the platform but the skill does not request elevated or persistent system-wide privileges. It does not attempt to modify other skills' configs.
Assessment
This skill appears to be what it says: a read-only DeFi intelligence API. Before installing, verify you trust preflyte.xyz (review their privacy policy and terms), and understand what agent data will be sent to the external API (portfolio sizes, intended trades, positions). Never send private keys or wallet seed phrases. Protect PREFLYTE_API_KEY like any API secret (use an ephemeral or scoped key if possible), test the skill with non-sensitive/dummy data first, and monitor network requests or logs if you need extra assurance. If you require on-chain analysis without external data sharing, do not enable this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk976skmj5bd8pbtpk2aztk343n84rprf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
Binscurl
EnvPREFLYTE_API_KEY
Primary envPREFLYTE_API_KEY

Comments