← Back to Skills Marketplace
Pacifica
by
Blockchain Oracle
· GitHub ↗
· v1.0.0
· MIT-0
69
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pacifica
Description
Trade perpetuals on Pacifica via 36 MCP tools. Market data, account monitoring, order execution, subaccounts, and real-time WebSocket streaming on Solana. Tr...
Usage Guidance
Do not install or run this skill until you confirm how it obtains and uses signing credentials. Ask the publisher: (1) Where does the code run and who controls it? (2) Exactly how are transactions signed—does the agent require your private key file (~/.pacifica-mcp/config.json) or an external wallet (Phantom/Backpack) for interactive signing? (3) If a private key file is created, is it encrypted and stored locally only? (4) Are there any network endpoints the skill will send your keys or trade data to? If you cannot get clear answers and inspect the implementation, avoid granting it access to funds or running it in autonomous mode. Prefer skills that require explicit, auditable credentials (hardware wallet, explicit API key) or that delegate signing to your browser wallet rather than storing private keys in agent-accessible files.
Capability Analysis
Type: OpenClaw Skill
Name: pacifica
Version: 1.0.0
The skill provides 36 tools for crypto trading on the Pacifica platform, including high-risk operations like 'pacifica-withdraw', 'pacifica-transfer-funds', and 'pacifica-market-order'. While these are aligned with the stated purpose of a trading agent, the instructions explicitly tell the AI to 'execute directly' for autonomous use, bypassing user confirmation for financial transactions. Furthermore, the skill manages sensitive private keys stored locally at '~/.pacifica-mcp/config.json', which is a high-value target for potential exploitation or exfiltration, although no explicit malicious code or exfiltration logic is present in the provided files.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's stated purpose is to view market data and place orders, which necessarily requires signing transactions with a wallet/private key. However the skill declares no required credentials, no primaryEnv, and no required config paths. The SKILL.md mentions an auto-generated wallet at ~/.pacifica-mcp/config.json (private key), but that sensitive config location is not declared or justified in the metadata.
Instruction Scope
Runtime instructions reference creating/using a wallet file in the user's home (~/.pacifica-mcp/config.json), streaming to channels, and executing orders directly for autonomous bots. The document does not describe how signing is performed, whether the agent will read the private key, or whether user interaction is required. This is scope creep relative to a purely read-only market-data skill and could lead to sensitive key access or unintended trades.
Install Mechanism
There is no install spec (instruction-only), which reduces risk from arbitrary downloads. However the SKILL.md asserts that a wallet will be auto-generated on first run and stored under the user's home directory—that implies filesystem writes by whatever runtime implements the skill even though no installers are declared.
Credentials
No environment variables or credentials are declared, yet the skill requires a private key/wallet for order execution and withdrawals. The lack of an explicit, proportional authentication mechanism (e.g., API key, hardware wallet, signed transactions via external wallet) is an inconsistency and a potential security risk.
Persistence & Privilege
always is false (normal). The SKILL.md explicitly says 'for autonomous/bot use, execute directly,' which increases practical risk because the agent may place trades without interactive confirmation. This is not a metadata privilege misconfiguration, but combined with the credential ambiguity it raises operational concerns.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pacifica - After installation, invoke the skill by name or use
/pacifica - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of pacifica skill for crypto perpetuals trading and market monitoring on Solana.
- Trade perpetuals and spot markets on Pacifica via 36 MCP tools.
- Access market data, account info, order execution, order/position management, and real-time WebSocket streaming.
- Includes full trigger/use guide and comprehensive mapping from user intents to tool actions.
- Supports account actions, subaccounts, funding, and error handling for free and wallet-signed operations.
- Provides parameter/spec formatting, critical behaviors, and workflow examples for robust trading automation.
Metadata
Frequently Asked Questions
What is Pacifica?
Trade perpetuals on Pacifica via 36 MCP tools. Market data, account monitoring, order execution, subaccounts, and real-time WebSocket streaming on Solana. Tr... It is an AI Agent Skill for Claude Code / OpenClaw, with 69 downloads so far.
How do I install Pacifica?
Run "/install pacifica" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pacifica free?
Yes, Pacifica is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pacifica support?
Pacifica is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pacifica?
It is built and maintained by Blockchain Oracle (@blockchain-oracle); the current version is v1.0.0.
More Skills