← Back to Skills Marketplace
harleyscodes

SaucerSwap Arbitrage

by HarleysCodes · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
613
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install saucerswap-arbitrage
Description
Perform triangular arbitrage on Hedera using SaucerSwap to find, calculate, and execute profitable multi-hop token swaps atomically.
Usage Guidance
This SKILL.md is incomplete and inconsistent with its stated goal. Before using it: (1) Do NOT paste or store private keys into the agent — require wallet-based signing (HashPack or other) so the agent cannot exfiltrate keys. (2) Ask the author how signing and submission are performed: the skill must declare how it obtains an account ID and private key or integrate a user-driven wallet prompt. (3) Verify and correct addresses and API usage: confirm whether SaucerSwap uses Hedera IDs (0.0.x), EVM addresses (0x...), or a specific API token format, and test the quoted endpoints (e.g., mainnet-api.saucerswap.fi) on testnet first. (4) Require explicit environment variables or an OAuth-like wallet flow if automation is needed; otherwise keep execution manual. (5) Test all logic on Hedera testnet with small amounts and review returned quote formats (responses are likely objects, not a single number). Given the mismatches (address formats, missing credentials, vague API expectations), treat this skill as suspicious and demand clarifications or a revised implementation before running it against mainnet funds.
Capability Analysis
Type: OpenClaw Skill Name: saucerswap-arbitrage Version: 1.0.0 The skill bundle is designed for executing triangular arbitrage on Hedera via SaucerSwap, as described in SKILL.md. It includes a TypeScript snippet to fetch quotes from `https://mainnet-api.saucerswap.fi` using `axios`, which is a legitimate network call for its stated purpose. A placeholder for `ContractExecuteTransaction` indicates the intent to execute swaps, which is also aligned with the skill's functionality. There is no evidence of malicious intent, such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the AI agent. All actions described are consistent with the stated goal of a DEX arbitrage tool.
Capability Assessment
Purpose & Capability
The skill says it will find and execute atomic multi-hop swaps on Hedera, but it declares no credentials, no signing method, and no account/keys. Executing transactions on Hedera requires an account ID and private key (or a wallet signing flow). The skill also mixes EVM-style 0x contract addresses with Hedera token IDs (0.0.x), which is inconsistent with a coherent deployment plan.
Instruction Scope
The SKILL.md includes code snippets that call an external API and shows a ContractExecuteTransaction to run a swap, but the instructions are vague: they use token symbols (e.g., 'USDC') where APIs typically expect token addresses/IDs, assume getQuote returns a raw numeric value, and do not explain how to obtain signatures or submit transactions. This leaves wide discretionary behavior and omits critical steps (wallet integration, signing, nonce/fee handling, error handling).
Install Mechanism
There is no install spec and no code files — the skill is instruction-only. That reduces risk from arbitrary downloads or disk writes. However, the examples reference Node (axios) and Hedera SDK constructs without declaring dependencies, which is incomplete but not itself an install risk.
Credentials
The skill requires no environment variables or credentials despite claiming the ability to submit on-chain swaps. Performing swaps requires sensitive credentials (account ID / private key) or a delegated wallet signing flow; the absence of any declared credential requirements is a mismatch and suggests the instructions are incomplete or could encourage insecure practices (e.g., pasting private keys into chat).
Persistence & Privilege
always is false and there is no persistence/install behavior. Autonomous invocation is allowed by default (platform standard), but combined with the credential omission this is a usability/consistency problem rather than a direct elevation of privilege.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install saucerswap-arbitrage
  3. After installation, invoke the skill by name or use /saucerswap-arbitrage
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of SaucerSwap Arbitrage skill for Hedera. - Enables detection and execution of triangular arbitrage opportunities on SaucerSwap. - Supports multi-hop token swaps and profit calculation across pools. - Provides API snippet for fetching swap quotes. - Documents mainnet contract and token addresses. - Includes safety checks for slippage, fees, and liquidity. - Notes Hedera-specific transaction and signing requirements.
Metadata
Slug saucerswap-arbitrage
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is SaucerSwap Arbitrage?

Perform triangular arbitrage on Hedera using SaucerSwap to find, calculate, and execute profitable multi-hop token swaps atomically. It is an AI Agent Skill for Claude Code / OpenClaw, with 613 downloads so far.

How do I install SaucerSwap Arbitrage?

Run "/install saucerswap-arbitrage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SaucerSwap Arbitrage free?

Yes, SaucerSwap Arbitrage is completely free (open-source). You can download, install and use it at no cost.

Which platforms does SaucerSwap Arbitrage support?

SaucerSwap Arbitrage is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SaucerSwap Arbitrage?

It is built and maintained by HarleysCodes (@harleyscodes); the current version is v1.0.0.

💬 Comments