Uniswap Analyze Pool

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only Uniswap pool analysis skill is narrowly scoped and appears benign, with the main things to notice being its delegation to a separate pool-researcher agent and a user-run GitHub install command.

This skill appears safe for read-only Uniswap pool research. Before installing, check that you trust the source you install from and that the pool-researcher subagent available in your environment is expected and trustworthy.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your agent may rely on another agent component to gather and calculate pool metrics, so the accuracy and boundaries of the result depend on that component.

Why it was flagged

The skill is designed to delegate work to a separate subagent. This is disclosed and purpose-aligned, but the provided artifacts do not define that subagent's own permissions or data handling.

Skill content
allowed-tools: [Task(subagent_type:pool-researcher)]
Recommendation

Install only if you are comfortable with the available pool-researcher agent in your environment, and treat investment-related outputs as analysis rather than guaranteed financial advice.

What this means

If installing directly from a moving GitHub branch, future contents at that path could differ from the artifacts reviewed here.

Why it was flagged

The README provides a user-directed install command from a GitHub branch path rather than a pinned commit. This is not hidden or automatic, but users should recognize the external source.

Skill content
npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/analyze-pool
Recommendation

Prefer installing from a trusted registry release or a pinned commit if you need reproducible provenance.