← Back to Skills Marketplace
pancake skills
by
Keti Yohannes
· GitHub ↗
· v1.0.0
607
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pancake-swap-skills
Description
BSC (Binance Smart Chain) trading on PancakeSwap — wallet creation, token swaps, pair discovery, and balance management.
Usage Guidance
This skill does what it says (PancakeSwap trading) but handles extremely sensitive material (private keys) and the published metadata doesn't match the runtime instructions. Before installing: 1) Verify the skill publisher/source (unknown source is risky). 2) Prefer using testnet (chain ID 97) first to validate behavior. 3) Do NOT use your main funds — create a dedicated small‑balance wallet and consider a hardware wallet or an encrypted keystore rather than plaintext privateKey in JSON. 4) Inspect and run the Node.js wallet creation snippet locally yourself; consider modifying it to encrypt the key (e.g., using ethers.Wallet.encrypt) and avoid storing privateKey in plaintext. 5) Ensure file permissions and disk encryption for ~/.config/bsc_agent/wallet.json and do not share it. 6) Require explicit, human-confirmed approvals for any transaction (and consider disabling autonomous model invocation for this skill). 7) Ask the publisher to fix the registry metadata to list required env vars/credentials and document when and how the skill will prompt for confirmation. If you cannot verify the source or enforce human confirmation, treat the skill as high risk and avoid installing it.
Capability Analysis
Type: OpenClaw Skill
Name: pancake-swap-skills
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for PancakeSwap is classified as benign. The skill transparently declares its purpose, file access (`~/.config/bsc_agent/wallet.json`, `~/.config/clawchain/credentials.json`), and network calls (BSC RPC, ClawChain node). Crucially, it includes strong security measures and explicit instructions to the AI agent: the wallet creation script sets owner-only permissions (`0o600`) for the private key file, and the documentation repeatedly warns against logging or transmitting the private key, emphasizing local signing. There is no evidence of prompt injection attempts, data exfiltration, or other malicious intent; the provided code snippets and instructions are directly aligned with the stated purpose of managing a BSC wallet and performing token swaps.
Capability Assessment
Purpose & Capability
The skill claims PancakeSwap trading (wallet creation, swaps, balance checks) and the SKILL.md instructions require exactly the things needed for that: an RPC URL, router and WBNB addresses, a local wallet file, Node.js and ethers. However the registry metadata at the top of the submission lists no required environment variables or primary credential while the SKILL.md defines several required env vars and a wallet credential — this metadata mismatch is incoherent and should be corrected/clarified by the publisher.
Instruction Scope
The runtime instructions explicitly create and read a local wallet file (~/.config/bsc_agent/wallet.json) containing the wallet privateKey and show a Node.js one‑liner that writes the private key in JSON (albeit with file mode 0o600). The skill also instructs signing and submitting transactions via the BSC RPC. Those actions are necessary for on‑chain trading but are high‑sensitivity (private key material + ability to move funds). The SKILL.md promises user confirmation before trades, but as an instruction-only skill there's no enforced technical guard: an agent with access to the wallet file could sign and send transactions if invoked autonomously.
Install Mechanism
This is an instruction-only skill (no install spec or code files). It recommends installing Node.js and the ethers npm package via 'npm install ethers' — a standard, traceable dependency installation. No downloads from untrusted URLs or archive extraction are present in the instructions.
Credentials
The skill requires direct access to a private-key wallet file and environment variables for BSC_RPC_URL, PANCAKE_ROUTER, WBNB and chain ID — all are relevant to on‑chain operations. That said, requiring read/write access to a private key file is a high-privilege request; the registry metadata omission of these env requirements increases suspicion. The optional read of another skill's credentials (~/.config/clawchain/credentials.json) is plausible for registration but cross-skill credential access should be documented and justified.
Persistence & Privilege
The skill is not marked always:true (so it's not force-included), but it is user-invocable and the platform default allows autonomous invocation. Combined with wallet file access, autonomous invocation increases blast radius (the agent could sign/send transactions). The SKILL.md states trades won't be executed without user confirmation, but that is an instruction rather than an enforced platform constraint — the user should ensure model invocation policies and confirmations are in place.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pancake-swap-skills - After installation, invoke the skill by name or use
/pancake-swap-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
**Major update: PancakeSwap skill for BSC rewritten, expands feature coverage and setup clarity.**
- Adds wallet creation and management, including security best practices and file path configuration.
- Supports BEP-20 token discovery, liquidity checks, and balance queries.
- Implements swap execution via PancakeSwap V2 with slippage protection.
- Environment variables have clear defaults for mainnet and testnet, with setup examples.
- Clarifies file access, credentials, and dependencies.
- Documents optional integration with ClawChain for event tracking.
- Emphasizes transparency and security throughout configuration and usage.
Metadata
Frequently Asked Questions
What is pancake skills?
BSC (Binance Smart Chain) trading on PancakeSwap — wallet creation, token swaps, pair discovery, and balance management. It is an AI Agent Skill for Claude Code / OpenClaw, with 607 downloads so far.
How do I install pancake skills?
Run "/install pancake-swap-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pancake skills free?
Yes, pancake skills is completely free (open-source). You can download, install and use it at no cost.
Which platforms does pancake skills support?
pancake skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pancake skills?
It is built and maintained by Keti Yohannes (@kj-script); the current version is v1.0.0.
More Skills