XPR Lending (LOAN Protocol)

Interact with LOAN Protocol on XPR Network to supply assets, borrow against collateral, redeem, repay loans, and claim LOAN token rewards on mainnet.

This skill's code will sign mainnet transactions and needs your XPR private key and account, but the published metadata and instructions omit those requirements and do not list the '@proton/js' dependency. Do not provide your private key until the author/source is verified and the skill is updated to: 1) declare required env vars (XPR_PRIVATE_KEY, XPR_ACCOUNT, optional XPR_PERMISSION), 2) include an install/dependency manifest (or instructions to install @proton/js), and 3) explicitly describe how confirmations are presented and how keys are used/stored. If you must test: only use read-only tools first, and if you enable write features, use an account with minimal funds / limited privileges. Ask the publisher for a homepage or source repository and for the missing metadata before installing.

Type: OpenClaw Skill Name: xpr-lending Version: 1.0.0 The skill bundle implements a LOAN Protocol lending and borrowing agent for the XPR Network. The `SKILL.md` provides clear, responsible instructions for the AI agent, including safety rules and explicit confirmation requirements for all write operations, showing no signs of prompt injection. The `src/index.ts` code correctly interacts with the XPR blockchain RPC and Metal X API, using `fetch` for network calls and `@proton/js` for signing transactions. While write operations require `XPR_PRIVATE_KEY` from environment variables, this is a necessary capability for a DeFi skill and is used internally for signing, not exfiltrated or misused. All actions are structured blockchain transactions or API calls, with no evidence of arbitrary code execution, data exfiltration, persistence mechanisms, or obfuscation. The `test-read.mjs` is a benign test script.