← Back to Skills Marketplace
davidpolotm

Mi Trading

by davidpolotm · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
610
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mi-trading
Description
Trade tokens on Solana using the ClawDex CLI. Use when the user asks to swap tokens, check balances, get quotes, or manage a Solana trading wallet.
Usage Guidance
This skill's instructions perform exactly the kind of operations you'd expect for a Solana trading CLI, but the registry metadata omits the sensitive items the SKILL.md needs (JUPITER_API_KEY, RPC URL, and a local wallet file). Before installing or running: (1) verify the provenance of the 'clawdex' npm package (publisher, repository, audit its source) rather than blindly running npm install -g; (2) never point the tool at your main wallet — use a dedicated wallet with minimal funds for testing; (3) consider running the CLI in an isolated environment/container; (4) confirm whether JUPITER_API_KEY or other secrets are actually required and where they are sent; (5) ask the skill author or registry to update metadata to declare required env vars and config paths. If the registry metadata and a trustworthy upstream repo are provided (and code audit shows no exfiltration), the concern would be reduced.
Capability Analysis
Type: OpenClaw Skill Name: mi-trading Version: 1.0.0 The skill is designed for Solana DEX trading using the `clawdex` CLI tool. It instructs the agent to install `clawdex` via `npm install -g`, configure it with environment variables (`JUPITER_API_KEY`, `SOLANA_RPC_URL`) and a local wallet file (`~/.config/solana/id.json`), and then perform trading operations. All instructions in `SKILL.md` are directly related to the stated purpose, including safety guardrails and a recommended trading workflow. While the skill accesses sensitive data (API keys, wallet file) and installs a global package, this is necessary for its functionality and there is no evidence of intentional data exfiltration, unauthorized actions, or malicious prompt injection attempts against the agent. The risks are inherent to automated trading and dependency management, not malicious intent within the skill's design.
Capability Assessment
Purpose & Capability
The name/description (Solana token trading via ClawDex) aligns with the SKILL.md content: commands, quotes, simulation, and execution are coherent for a trading skill. However, the registry metadata claims no required env vars or config paths while the instructions explicitly reference JUPITER_API_KEY, SOLANA_RPC_URL, and a wallet file (~/.config/solana/id.json), which is inconsistent and unexplained.
Instruction Scope
The SKILL.md stays within trading scope (health check, balances, simulate, execute) but it instructs the agent to access a local Solana wallet file and environment variables (JUPITER_API_KEY, optional SOLANA_RPC_URL). Accessing a user's wallet file is sensitive; the instructions do not limit which wallet to use or instruct using a dedicated/trust-limited wallet. The SKILL.md also suggests installing clawdex from npm, which requires running third-party code.
Install Mechanism
This is instruction-only (no install spec in registry). The SKILL.md recommends 'npm install -g clawdex@latest' if clawdex is not present — a common mechanism but it entails installing an npm package from the public registry. No opaque download URLs or extract steps are present in the skill itself.
Credentials
The registry declares no required env vars, but the SKILL.md requires JUPITER_API_KEY during onboarding and references SOLANA_RPC_URL. It also assumes access to a wallet file path (~/.config/solana/id.json). Requesting access to a private wallet file and an API key is proportionate to trading functionality — but it should be declared up front. The lack of declared credentials/config in metadata is a mismatch that could lead to unexpected exfiltration risk if the underlying clawdex binary is untrusted.
Persistence & Privilege
The skill does not request persistent/all-skill privileges (always: false) and does not modify other skills or system-wide settings in the provided instructions. Autonomous invocation is allowed by default (disable-model-invocation: false) but that is platform default and not by itself flagged.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mi-trading
  3. After installation, invoke the skill by name or use /mi-trading
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the ClawDex skill for Solana DEX trading: - Enables trading any Solana token via the ClawDex CLI and Jupiter aggregator. - Supports checking wallet balances, getting swap quotes, simulating trades, and executing swaps with safety guardrails. - Requires all CLI commands to use `--json` for machine-parseable output. - Includes detailed trading workflow, token specification, exit codes, and safety features. - Provides onboarding guidance and troubleshooting steps for user setup.
Metadata
Slug mi-trading
Version 1.0.0
License
All-time Installs 2
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Mi Trading?

Trade tokens on Solana using the ClawDex CLI. Use when the user asks to swap tokens, check balances, get quotes, or manage a Solana trading wallet. It is an AI Agent Skill for Claude Code / OpenClaw, with 610 downloads so far.

How do I install Mi Trading?

Run "/install mi-trading" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Mi Trading free?

Yes, Mi Trading is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Mi Trading support?

Mi Trading is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Mi Trading?

It is built and maintained by davidpolotm (@davidpolotm); the current version is v1.0.0.

💬 Comments