← Back to Skills Marketplace
wpank

Uniswap Research And Trade

by wpank · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
866
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install research-and-trade
Description
Research a token and execute a trade if it passes due diligence. Autonomous research-to-trade pipeline: researches the token, evaluates risk, and only trades if the risk assessment approves. Stops and reports if risk is too high. Use when user wants "research X and buy if it looks good" or "due diligence then trade."
Usage Guidance
Do not install or use this skill with real funds until the following are clarified: (1) exactly how and where the skill gets signing authority — which env vars, connectors, or platform wallets it will use; (2) whether every trade requires explicit, per-trade user confirmation and manual signing; (3) what the Task(subagent_type:trade-executor) is and what privileges it has; and (4) what external endpoints (RPC nodes, relayers, third-party services) the skill will call. If you need the research functionality only, prefer using a read-only skill or refusal to execute trades automatically. If you decide to test, use a throwaway wallet with minimal funds on a testnet or small amount and review all prompts and logs. Ask the maintainer for a clear security model and an audit of the trade-executor behavior before trusting it with real assets.
Capability Analysis
Type: OpenClaw Skill Name: research-and-trade Version: 0.1.0 The skill is classified as suspicious due to significant prompt injection vulnerabilities. The primary concern is the 'compound context' mechanism described in SKILL.md, where the full, unvalidated outputs from sub-agents (e.g., token-analyst, pool-researcher) are directly embedded into the prompts of subsequent sub-agents (e.g., risk-assessor, trade-executor). This creates a critical vulnerability where a malicious user could craft inputs to an earlier sub-agent, causing it to generate an output containing harmful instructions, which would then be executed by a later, potentially more privileged, sub-agent. This could bypass the skill's intended safety gates and lead to unauthorized actions or data exfiltration, despite the presence of explicit user confirmation steps and hard vetoes for high-risk trades.
Capability Assessment
Purpose & Capability
The skill's stated purpose is an end-to-end research-to-trade pipeline that executes on-chain swaps. However, the package declares no required environment variables, config paths, binaries, or credentials (no private key, wallet connector, RPC URL, or third-party API tokens). A trade-executor subagent is listed but the SKILL.md does not explain how transaction signing or provider access is obtained. This mismatch between claimed capability (executing on-chain trades) and declared requirements is a substantive coherence gap.
Instruction Scope
The runtime instructions let the pipeline automatically proceed from research -> risk assessment -> trade execution (APPROVE → Proceed to Step 4). While the skill mentions vetoes and conditional approvals, it also describes automatically executing trades when approved. The SKILL.md does not describe an explicit user confirmation/signing step, nor does it describe what the trade-executor tool needs or how it obtains consent to spend funds. That grants broad operational discretion to the agent without documenting where signing authority comes from.
Install Mechanism
This is instruction-only with no install spec and no code files — the lowest-risk install surface. There is no download, no package installations, and nothing is written to disk by the skill itself.
Credentials
A trade-capable skill would reasonably require credentials or connectors (wallet private key / wallet provider, RPC endpoints, or an exchange API key). This skill declares none. That absence is suspicious: either the skill assumes hidden platform-level connectors (not documented) or it will attempt to operate without explicit signing or will prompt interactively. Either case should be clarified before use because it affects who can sign and pay gas.
Persistence & Privilege
The skill is not always-enabled (always: false). Autonomous invocation is permitted (disable-model-invocation: false), which is platform-default. Autonomous ability combined with the skill's execution capability is a risk — it could place transactions without clear documented human-in-the-loop signing — but autonomous invocation by itself is not unusual for skills.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install research-and-trade
  3. After installation, invoke the skill by name or use /research-and-trade
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: Autonomous research-to-trade workflow - Researches a token, analyzes liquidity, evaluates risk, and only executes a trade if approved by due diligence. - Fully automates and links four expert steps: research, pool selection, risk assessment, and execution. - Stops immediately if risk is too high, providing a detailed report to the user. - Gathers and compounds context at each step, enabling richer risk analysis than standalone tools. - Requires a specific trade amount from the user before proceeding; never guesses trade size. - Shows progressive findings at each pipeline stage, not just at the end.
Metadata
Slug research-and-trade
Version 0.1.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Uniswap Research And Trade?

Research a token and execute a trade if it passes due diligence. Autonomous research-to-trade pipeline: researches the token, evaluates risk, and only trades if the risk assessment approves. Stops and reports if risk is too high. Use when user wants "research X and buy if it looks good" or "due diligence then trade.". It is an AI Agent Skill for Claude Code / OpenClaw, with 866 downloads so far.

How do I install Uniswap Research And Trade?

Run "/install research-and-trade" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Uniswap Research And Trade free?

Yes, Uniswap Research And Trade is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Uniswap Research And Trade support?

Uniswap Research And Trade is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Uniswap Research And Trade?

It is built and maintained by wpank (@wpank); the current version is v0.1.0.

💬 Comments