Uniswap Create Test Pool
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: create-test-pool Version: 0.1.0 The skill is designed to deploy custom Uniswap pools on a local testnet for testing purposes. All instructions in `SKILL.md` guide the AI agent to use pre-approved tools (`mcp__uniswap__deploy_mock_pool`, `mcp__uniswap__fund_test_account`, etc.) exclusively within a 'local testnet' environment, explicitly mentioning 'Anvil account #1' and 'mock pool'. There is no evidence of intent to exfiltrate data, establish persistence, execute arbitrary remote code, or perform prompt injection against the agent for malicious purposes. The installation instructions in `README.md` use standard `npx` commands pointing to a GitHub repository, which is a common and acceptable practice for skill distribution.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When invoked, the agent can create pools and alter balances in the connected Uniswap test environment.
The skill grants tools that can fund a test account and deploy a mock pool. This is purpose-aligned for local testnet pool creation, but it still changes the test environment.
allowed-tools:\n - mcp__uniswap__deploy_mock_pool\n - mcp__uniswap__fund_test_account\n - mcp__uniswap__get_pool_info\n - mcp__uniswap__search_tokens
Use it only with a known local testnet/MCP server and review the requested token pair, fee, price, and liquidity before deployment.
Installing from an unverified external path could add a skill version different from what the user expects.
The README recommends installing via npx from a GitHub path, while the registry metadata lists the source as unknown. This is a provenance item users should verify, not evidence of hidden code in the provided artifacts.
npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/create-test-pool
Verify the GitHub repository and prefer a trusted, pinned release or the reviewed Clawhub package before installing.
