Uniswap Optimize Lp

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:29 AM UTC
• Version:
  0.1.0

Overview

This skill provides DeFi liquidity strategy recommendations and shows no evidence of trade execution, credential access, persistence, or hidden behavior.

Installers should treat outputs as financial research, not instructions to execute. Provide a clear pair, chain, position size, time horizon, and risk tolerance, and independently review recommendations before depositing liquidity or making trades.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The description and metadata position the skill as generally applicable whenever a user asks how to LP, what range to use, or which version/fee tier is best, without tighter gating criteria. In an agent system, this can cause over-triggering and delegation in ambiguous contexts, increasing the chance of unsolicited financial strategy advice being surfaced when the user did not clearly request this specific skill.

Vague Triggers

Low

• Confidence: 80% confidence
• Finding: The activation examples are broad positive examples but do not define boundaries for when the skill should not run. Without exclusion conditions, nearby intents such as general market commentary, swap advice, yield farming comparisons, or liquidity execution could incorrectly activate this skill, leading to misrouting and potentially unsuitable financial recommendations.

VirusTotal

65/65 vendors flagged this skill as clean.