← Back to Skills Marketplace
207
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tempo-stable-uniswap-swaps
Description
Tempo stablecoin and token swap operations for agents. Use when working with pathUSD/USDC.e balances, swapping between USDC.e and pathUSD, or executing any-t...
Usage Guidance
This skill contains valid, actionable instructions to perform token swaps on Tempo, but it expects you to provide a PRIVATE_KEY (full control of the wallet) and an UNISWAP_API_KEY even though the published metadata did not declare those requirements — treat that as a red flag. Before using or installing:
- Do not supply your primary/private mainnet key. Use an ephemeral or tightly funded wallet, or a hardware wallet with manual signing. If you must provide PRIVATE_KEY to an automated agent, accept the risk that the agent could broadcast arbitrary transactions.
- Limit Permit2 approvals: avoid the unlimited/huge allowance pattern unless you understand and accept the exposure. Approve minimal amounts or use short expirations where supported.
- Verify endpoints and addresses: confirm RPC_URL, token addresses, Permit2 address, and Uniswap API host are correct and official for Tempo mainnet.
- Be cautious about running remote installers (the SKILL.md suggests curl | bash for Foundry). Prefer installing tools manually from verified sources or using package managers you trust.
- Consider asking the publisher to update the skill metadata to explicitly declare required env vars and binaries (PRIVATE_KEY, UNISWAP_API_KEY, cast/curl/jq) so risks are visible before install.
If you cannot accept these risks or cannot constrain the key/allowances, do not use this skill. If you proceed, test with a small amount or on a non-production wallet first.
Capability Analysis
Type: OpenClaw Skill
Name: tempo-stable-uniswap-swaps
Version: 1.0.0
The skill facilitates token swaps on the Tempo network but exhibits high-risk patterns, including the requirement for a PRIVATE_KEY environment variable which is passed directly to shell commands via 'cast' in SKILL.md, potentially exposing sensitive credentials to process monitoring or shell history. It also includes a command to install Foundry via 'curl | bash', which is a high-risk execution pattern. While these behaviors are plausibly needed for the skill's stated purpose of executing blockchain transactions, the insecure handling of secrets and the use of untrusted remote scripts warrant a suspicious classification.
Capability Assessment
Purpose & Capability
The SKILL.md describes exactly the stated purpose (Tempo swaps, pathUSD/USDC.e, Uniswap Trade API). However the registry metadata lists no required env vars or binaries while the SKILL.md explicitly requires PRIVATE_KEY, UNISWAP_API_KEY, and tools (cast/curl/jq). The missing declarations are an incoherence (likely sloppy metadata) that increases risk because sensitive requirements are not surfaced.
Instruction Scope
Runtime instructions tell the agent to use a PRIVATE_KEY to derive wallet addresses, build/send transactions, approve Permit2 with effectively unlimited allowance, call Uniswap trade API with an API key, and optionally run a remote Foundry installer. The instructions do not ask to read unrelated files, but they do perform high-impact actions (signing/broadcasting transactions and setting broad approvals) that require the user's private key and therefore carry high risk if misused.
Install Mechanism
There is no formal install spec (skill is instruction-only), which is low risk. But the SKILL.md suggests installing Foundry via a remote curl | bash from foundry.paradigm.xyz — an external installer executed from a script is higher-risk operationally (even if the host is a known provider). This should be considered when following the instructions.
Credentials
The env/credential needs in the instructions (PRIVATE_KEY and UNISWAP_API_KEY, optional RPC_URL) are plausible for a swap tool, but the registry metadata failing to declare them is a mismatch. The PRIVATE_KEY is extremely sensitive (gives full wallet control). UNISWAP_API_KEY is reasonable, RPC_URL optional. The skill also instructs granting very large Permit2 allowances — functional for swaps but increases exposure if keys are compromised.
Persistence & Privilege
The skill does not request always:true, does not supply an install that writes persistent code, and does not claim to modify other skills or global agent settings. Autonomous invocation is allowed (default) which increases blast radius when combined with PRIVATE_KEY access, but that default alone is not flagged per policy.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tempo-stable-uniswap-swaps - After installation, invoke the skill by name or use
/tempo-stable-uniswap-swaps - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of tempo-stable-uniswap-swaps.
- Provides step-by-step instructions for swapping tokens (including pathUSD and USDC.e) via Uniswap on Tempo mainnet.
- Includes commands for balance checks, token transfers, Permit2 approvals, quoting, simulation, and broadcasting swaps.
- No external dependencies required beyond standard tools (`cast`, `curl`, `jq`).
- Outlines network and token specifics for Tempo, with caution for fee headroom on pathUSD transfers.
- Documents common error cases and resolutions.
Metadata
Frequently Asked Questions
What is Tempo Stable + Uniswap Swaps?
Tempo stablecoin and token swap operations for agents. Use when working with pathUSD/USDC.e balances, swapping between USDC.e and pathUSD, or executing any-t... It is an AI Agent Skill for Claude Code / OpenClaw, with 207 downloads so far.
How do I install Tempo Stable + Uniswap Swaps?
Run "/install tempo-stable-uniswap-swaps" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tempo Stable + Uniswap Swaps free?
Yes, Tempo Stable + Uniswap Swaps is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tempo Stable + Uniswap Swaps support?
Tempo Stable + Uniswap Swaps is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tempo Stable + Uniswap Swaps?
It is built and maintained by aviclaw (@aviclaw); the current version is v1.0.0.
More Skills