Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Uniswap Design Integration

Design a Uniswap integration architecture. Use when user is building a project that needs to integrate Uniswap and wants recommendations on integration method (Trading API vs SDK vs direct contract), architecture patterns, required dependencies, and security considerations.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 620 · 2 current installs · 2 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Uniswap integration design) align with the skill's runtime instructions: it produces architecture blueprints, dependency lists, security reviews, and implementation plans. The allowed runtime tools for reading and analyzing a user's codebase (Read, Glob, Grep, etc.) are reasonable given the SKILL.md statements that the agent will analyze existing codebases.
Instruction Scope
The SKILL.md delegates work to a subagent (Task(subagent_type:integration-architect)) and explicitly says it will analyze an existing codebase when provided. That explains file-read capabilities. There is a minor inconsistency: allowed-tools includes an MCP tool (mcp__uniswap__get_supported_chains) but the SKILL.md's Important Notes claims it 'does not call MCP tools directly.' This is likely benign (an unused capability) but is an inconsistency worth noting. The instructions do not request secrets, system-wide config, or external endpoints beyond the normal scope of an architecture task.
Install Mechanism
Instruction-only skill with no install spec or code files — low-risk. README suggests an external npx install command, but that is a user-facing instruction for fetching the skill and not part of the skill's runtime behavior.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. This is proportional to its stated purpose of producing designs and analyzing provided code. It does, however, assume the agent can read project files when asked, which is reasonable but means users should avoid including secrets in shared code.
Persistence & Privilege
always is false and the skill does not request persistent system presence or modify other skill configurations. Autonomous invocation is allowed (platform default) but not a special privilege for this skill.
Assessment
This skill is an instruction-only blueprint generator and appears consistent with its description. Before installing or running it: 1) Be mindful that the skill (and the subagent it spawns) can read project files — do not provide repositories that contain private keys, .env files, or other secrets. Remove or redact secrets from any code you ask it to analyze. 2) Note the minor inconsistency: allowed-tools lists an MCP helper (mcp__uniswap__get_supported_chains) though SKILL.md says it doesn't call MCP tools directly; this likely means the tool is available but unused — verify during use. 3) The skill enforces certain technology choices (e.g., viem and Permit2) — treat those as recommendations and confirm they suit your project. 4) Always review any dependency/version recommendations and security mitigations the skill produces before applying them. If you want stronger assurance, ask for a list of exactly which files the subagent will read and for a dry-run that excludes production secrets.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk97fe1d0hgb6stwbpvvh2xqybs80xxhv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Design Integration

Overview

Designs a complete Uniswap integration architecture for any project by delegating to the integration-architect agent. Produces a comprehensive blueprint covering: integration method recommendation (Trading API vs Universal Router SDK vs direct contract vs V4 hooks), component architecture, dependency list with versions, security review with mitigations, and ordered implementation plan.

When to Use

Activate when the user asks:

  • "Help me integrate Uniswap"
  • "Design a swap integration"
  • "Architecture for a DEX aggregator"
  • "How to build an arbitrage bot"
  • "Uniswap integration plan"
  • "How should I add swaps to my dApp?"
  • "Best way to integrate Uniswap in my backend"
  • "Architecture for a DeFi protocol that uses Uniswap"
  • "What SDK should I use for Uniswap?"

Parameters

ParameterRequiredDefaultDescription
projectTypeYes--Type of project (e.g., "DeFi dashboard", "arb bot", "wallet app", "DeFi protocol")
functionalityYes--Required Uniswap functionality: "swap", "LP", "both", or "custom"
environmentNoAuto-detectExecution environment: "frontend", "backend", "smart contract", or "full-stack"
chainsNoethereumTarget chain(s): single chain name or comma-separated list
scaleNo--Expected scale: transaction volume, concurrent users, latency requirements

Workflow

  1. Extract parameters from the user's request: identify the project type, required functionality, target environment, chains, and scale requirements. If the user has an existing codebase, note it for the agent to analyze.

  2. Delegate to integration-architect: Invoke Task(subagent_type:integration-architect) with the full context. The integration-architect will:

    • Understand the project context and requirements
    • Evaluate integration methods and recommend primary + fallback
    • Design the component architecture with data flow
    • Identify all dependencies (NPM packages, APIs, infrastructure)
    • Perform a security review with attack vectors and mitigations
    • Produce an ordered implementation plan with effort estimates
  3. Present the blueprint to the user covering:

    • Integration method recommendation with clear rationale
    • Architecture overview (components, data flow, error handling)
    • Complete dependency list with versions and purposes
    • Security considerations with specific mitigations
    • Step-by-step implementation order with effort estimates
    • Overall complexity assessment

Output Format

Present a structured integration blueprint:

Integration Blueprint: DeFi Dashboard with Swap (Ethereum + Base)

  Recommended Method: Trading API (primary), Universal Router SDK (fallback)
  Rationale: Trading API provides optimized routing with minimal frontend
             complexity. Fallback to SDK for advanced use cases or API downtime.

  Architecture:
    User -> QuoteService -> ApprovalManager -> SwapExecutor -> Wallet -> Chain
    
    Components:
      QuoteService:      Fetches and caches quotes from Trading API
      ApprovalManager:   Manages Permit2 approvals and allowances
      SwapExecutor:      Constructs and submits swap transactions
      ChainManager:      Multi-chain config and RPC connections

  Dependencies:
    @uniswap/sdk-core    ^5.8.0    Token and price primitives
    viem                 ^2.21.0   Ethereum client
    wagmi                ^2.14.0   React wallet hooks
    @tanstack/react-query ^5.0.0   Data fetching and caching

  Security:
    - Stale quotes: Refresh every 15s, enforce deadline (block.timestamp + 300s)
    - Approvals: Permit2 with exact amounts and 30-min expiry
    - Key management: wagmi wallet connection only, never handle keys

  Implementation Order:
    1. Wallet connection (wagmi)           — 1 day
    2. Chain configuration                 — 0.5 days
    3. Quote fetching service              — 1 day
    4. Permit2 approval flow               — 1 day
    5. Swap execution and tracking         — 1.5 days
    6. Error handling and retry logic      — 1 day

  Complexity: Medium

Important Notes

  • This skill delegates entirely to the integration-architect agent -- it does not call MCP tools directly.
  • The blueprint is tailored to the specific project type and requirements -- not a generic template.
  • For existing codebases, the agent will analyze the current code and recommend integration patterns that fit the existing architecture.
  • The implementation order considers dependencies between components -- follow the order for smoothest development.
  • Always uses viem (not ethers.js) and Permit2 (not legacy approve) per project conventions.

Error Handling

ErrorUser-Facing MessageSuggested Action
VAGUE_PROJECT"Need more detail about your project to recommend an integration approach."Describe project type and what Uniswap functionality is needed
DEPRECATED_APPROACH"The requested integration method is deprecated. Recommending alternatives."Follow the updated recommendation
UNSUPPORTED_CHAIN"Uniswap is not deployed on the specified chain."Choose from the 11 supported chains
CONFLICTING_REQUIREMENTS"The requirements conflict (e.g., frontend + direct contract calls)."Clarify the execution environment and adjust expectations

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…