Uniswap Create Test Pool

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When invoked, the agent can create pools and alter balances in the connected Uniswap test environment.

Why it was flagged

The skill grants tools that can fund a test account and deploy a mock pool. This is purpose-aligned for local testnet pool creation, but it still changes the test environment.

Skill content
allowed-tools:\n  - mcp__uniswap__deploy_mock_pool\n  - mcp__uniswap__fund_test_account\n  - mcp__uniswap__get_pool_info\n  - mcp__uniswap__search_tokens
Recommendation

Use it only with a known local testnet/MCP server and review the requested token pair, fee, price, and liquidity before deployment.

What this means

Installing from an unverified external path could add a skill version different from what the user expects.

Why it was flagged

The README recommends installing via npx from a GitHub path, while the registry metadata lists the source as unknown. This is a provenance item users should verify, not evidence of hidden code in the provided artifacts.

Skill content
npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/create-test-pool
Recommendation

Verify the GitHub repository and prefer a trusted, pinned release or the reviewed Clawhub package before installing.