Yields Llama

Query DeFi yield opportunities across chains using the yieldsllama CLI (powered by DeFi Llama API). Use when the user asks about DeFi yields, APY, best staki...

This skill appears to do what it claims, but it requires building and installing third‑party code and will create files in the directory where it runs. Before installing or running: (1) review the GitHub repository source (https://github.com/0x9bb1/yieldsllama) to ensure you trust it; (2) avoid running curl | sh blindly — prefer installing rustup from official docs or using a package manager you control; (3) run the build/install steps inside a container or VM if you want to limit system impact; (4) be aware the install copies a binary into /usr/local/bin (may need sudo) and the tool will create/modify a .env and data.json in the current working directory — run it from a safe/empty directory to avoid overwriting project config; (5) confirm network calls to yields.llama.fi are acceptable in your environment. If you want stronger assurance, ask the publisher for a release tarball + checksum or a prebuilt binary from a vetted source.

Type: OpenClaw Skill Name: yieldsllama Version: 1.0.0 The skill instructions in SKILL.md require the agent to perform high-risk system operations, including installing the Rust toolchain via 'curl | sh' and cloning, compiling, and installing a binary from a third-party GitHub repository (0x9bb1/yieldsllama) into '/usr/local/bin'. While these actions are functionally consistent with providing a CLI tool, they introduce significant supply chain risks and potential for unauthorized system-wide modifications without auditing the external source code.