Uniswap Full Lp Workflow

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is transparent about automating Uniswap LP research and transactions, but it can affect real funds, so users should review every approval carefully.

Use this only with a wallet and capital amount you are willing to risk. Treat every swap and LP-entry confirmation as a real financial transaction: check token addresses, amounts, slippage, chain, gas, pool details, and risk assessment before approving.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user approves a poor or incorrect transaction, funds could be swapped or deployed into a risky LP position.

Why it was flagged

The skill is designed to perform real DeFi actions that can move funds. This is disclosed and central to the purpose, but it is high-impact tool use.

Skill content
executes any needed swaps, enters the position, and reports portfolio impact
Recommendation

Before approving, verify the chain, tokens, pool, fee tier, amount, slippage, gas costs, and expected LP risk.

What this means

The agent may use wallet balance information to decide what capital and tokens are available for deployment.

Why it was flagged

The skill may read wallet or agent balance information to plan capital deployment. This is expected for an LP-management workflow, but it involves financial account context.

Skill content
mcp__uniswap__get_agent_balance
Recommendation

Use a dedicated wallet with limited funds and allowances, and do not approve transactions beyond the amount you intended to deploy.

What this means

Financial preferences, capital amounts, wallet context, and strategy decisions may be shared among the named subagents during the workflow.

Why it was flagged

The workflow passes financial opportunity, strategy, risk, and portfolio context across multiple subagents. This is disclosed and purpose-aligned, but users should understand that sensitive financial context may flow through the orchestration.

Skill content
Each agent builds on all prior agents' findings
Recommendation

Review the related subagents and avoid providing more wallet or portfolio information than is needed for the task.

What this means

Installing from a moving branch or latest package can change what gets installed over time.

Why it was flagged

The README documents installation from a remote GitHub path and also uses npx. This is user-directed installation documentation, not automatic execution in the skill, but users should confirm they trust the source.

Skill content
npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/full-lp-workflow
Recommendation

Install from a trusted registry or pin/review the exact source version before using it with a funded wallet.