Setup Local Anvil Testnet
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned for creating a local Uniswap/Anvil development network, with user-noticeable risks around remote setup commands, local testnet control, and disposable test private keys.
Install this only if you want a local Uniswap/Anvil development testnet. Verify the remote install sources before running npx or curl-to-bash setup commands, be aware it may start or clean up local testnet resources, and never use the displayed development private keys for real funds.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing from a moving remote source could install changed content later if the upstream branch changes.
The documented install path fetches from a remote GitHub branch rather than a pinned immutable commit. This is common for skill installation but means the user is trusting that remote source at install time.
npx skills add https://github.com/wpank/Agentic-Uniswap/tree/main/.ai/skills/setup-local-testnet
Install only from sources you trust, and prefer a pinned release or commit when reproducibility matters.
Running the setup command gives the remote installer control over the local shell environment.
The skill suggests a user-directed remote shell installer for Foundry/Anvil if Anvil is missing. This is purpose-aligned, but it executes code downloaded from the network.
Install: curl -L https://foundry.paradigm.xyz | bash && foundryup
Review Foundry’s official installation guidance and run the installer only if you trust the source.
Invoking the skill can start or change a local development blockchain and funded test accounts.
The skill grants the agent access to MCP tools that can create and fund a local testnet. This is central to the stated purpose, but it is still local environment mutation.
allowed-tools:\n - mcp__uniswap__setup_local_testnet\n - mcp__uniswap__fund_test_account
Use it when you intentionally want a local Uniswap test environment, and specify chain, block, account count, and port when those details matter.
Anyone with those keys can control the local test accounts, and those keys should never be used for real funds.
The skill’s expected output includes private keys for local development accounts. These are standard disposable test keys, but they still authorize the corresponding accounts.
Private Keys (for wallet config):\n Account #1: 0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80
Treat the displayed keys as public, disposable development keys and do not reuse them on public networks or with real assets.