Uniswap Optimize Lp

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: optimize-lp Version: 0.1.0 The skill bundle is benign. The `SKILL.md` clearly defines the purpose of providing an LP strategy recommendation and delegates to internal OpenClaw subagents (`lp-strategist`, `pool-researcher`, `risk-assessor`) via the `Task` tool. There are no instructions for prompt injection, no direct execution of arbitrary commands, no attempts to exfiltrate data, or any other malicious behaviors. The skill explicitly states it provides a recommendation, not execution, further indicating benign intent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may not immediately know which upstream repository or publisher to trust for future updates.

Why it was flagged

The registry metadata does not identify a source or homepage, while the skill is installed through external tooling. This is a low-level provenance item users may want to verify.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm that the ClawHub owner and any referenced repository are the intended source before installing or updating.

What this means

Financial preference details in the prompt may be shared with the configured analysis agents used by this skill.

Why it was flagged

The skill intentionally passes the user's token pair, capital amount, chain, and risk tolerance to configured subagents. This is aligned with the purpose, but the artifact does not describe subagent provenance or data boundaries.

Skill content
Delegate to lp-strategist ... internally delegates to `pool-researcher` for data and `risk-assessor` for risk evaluation.
Recommendation

Use this only in an environment where the named subagents are trusted, and avoid including wallet secrets or private keys in prompts.