Uniswap Analyze Burn Economics

• Verdict: Pass
• Analyzed: May 12, 2026, 3:46 AM
• Findings: 0
• Version: 0.1.0
• Hash: d95852374e4a1b1e17236aee9bddbd067dd6378f4255e0cfaf6170f5328d5d20
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: analyze-burn-economics Version: 0.1.0 The skill bundle is classified as benign. Its stated purpose is 'Comprehensive analysis of Uniswap Firepit burn economics', and all provided files and instructions align with this analytical, read-only goal. The `SKILL.md` explicitly states 'No execution capability -- this is strictly analytical' and lists only data retrieval tools (`mcp__uniswap__get_*`) and a subagent (`Task(subagent_type:protocol-fee-seeker)`) which is instructed with a detailed, purely analytical prompt. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the agent to deviate from its stated purpose.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

Installing from an external repository means the user relies on that repository and installer path being the intended source.

Why it was flagged

The README documents a user-directed install from an external GitHub path; this is expected for setup but users should verify the source they install from.

Skill content

npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/analyze-burn-economics

Recommendation

Install only from a trusted source and review the repository path or Clawhub listing before adding the skill.

ASI07: Insecure Inter-Agent Communication

NoteHigh Confidence

What this means

The report may depend on data returned by the Uniswap MCP provider and analysis delegated to the named subagent.

Why it was flagged

The skill relies on a named subagent and Uniswap MCP tools to gather and analyze data; this is purpose-aligned and appears read-only, but it is still external/tool-mediated analysis.

Skill content

allowed-tools:\n  - Task(subagent_type:protocol-fee-seeker)\n  - mcp__uniswap__get_burn_history\n  - mcp__uniswap__get_fee_accumulation_rate\n  - mcp__uniswap__get_firepit_state

Recommendation

Use with trusted MCP/provider configuration and keep the skill limited to public Uniswap analysis rather than account-specific or private data.