Uniswap Lp Strategy

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:30 AM UTC
• Version:
  0.1.0

Overview

This is an instruction-only LP strategy comparison skill that provides analysis and does not itself request wallet access, credentials, installs, persistence, or transaction execution.

Reasonable to install if you want LP strategy comparison help. Treat outputs as investment analysis, not instructions to move funds; verify APY, IL, gas, and pool data independently. Before acting on any recommendation, separately review any subagents and any execution skill such as manage-liquidity, especially if they request wallet access or API keys.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The activation examples are broad and lack exclusion criteria, so the skill may trigger on general educational or exploratory conversations about LPs rather than explicit requests for a full strategy comparison. In an agent system, over-broad routing can cause unnecessary delegation to research subagents, produce overly authoritative financial analysis when not requested, and increase the chance of inappropriate downstream actions if later turns build on that unsolicited analysis.

VirusTotal

66/66 vendors flagged this skill as clean.