Setup Local Anvil Testnet

Spin up a local Anvil testnet with Uniswap deployed and pre-seeded liquidity. One command gives you a full development environment with funded accounts, real Uniswap pools, and zero gas costs. Use when developing, testing, or demoing Uniswap agent workflows.

This skill appears to do what it claims (start a local Anvil fork, seed Uniswap pools, and return accounts/contracts), but check these before installing or running: 1) Confirm where the fork RPC comes from — the MCP tool or you will need to supply an RPC URL / API key (Alchemy/Infura/etc.). Don't assume anonymous public RPCs will be used. 2) The SKILL.md suggests running Foundry's installer (curl ... | bash) if Anvil is missing — audit that installer and run it yourself if you trust the source. 3) The skill will print private keys for test accounts (normal for local forks). Treat those keys as sensitive for any environment where networked components might read them; never reuse them on mainnet. 4) Verify the MCP tool implementations (mcp__uniswap__setup_local_testnet, fund_test_account, get_supported_chains) come from a trusted source or inspect their code before allowing autonomous execution. 5) If you are uncertain, run this skill in an isolated VM/container and ensure it uses a known RPC endpoint. These checks would change the confidence to high if satisfied.

Type: OpenClaw Skill Name: setup-local-testnet Version: 0.1.0 The skill is classified as suspicious primarily due to a prompt injection risk and the exposure of sensitive information. The SKILL.md file instructs the AI agent to output a `curl -L https://foundry.paradigm.xyz | bash && foundryup` command to the user if a prerequisite (Anvil) is not found. While intended for the user, this `curl | bash` pattern is inherently risky, and a poorly constrained AI agent could potentially misinterpret this as an instruction to execute the command itself, leading to arbitrary code execution. Additionally, the skill outputs default Anvil private keys in SKILL.md, which, despite being labeled as test keys, is a sensitive information disclosure.