Solana Sniper Bot

Autonomous Solana token sniper and trading bot. Monitors new token launches on Raydium/Jupiter, evaluates rugpull risk with LLM analysis, auto-buys promising launches, and manages exit strategies. Use when user wants to snipe Solana token launches, trade memecoins, monitor new Solana pairs, or build a Solana trading bot. Supports cron-based monitoring, take-profit/stop-loss, and portfolio tracking.

This skill appears to do what it claims, but it requires your wallet private key and will autonomously sign and send trades. Before installing: (1) Do not use your main wallet — create a dedicated funding wallet with only the funds you can afford to lose. (2) Inspect the code yourself (or have someone you trust do so); the repo is plain Python and uses known APIs. (3) Run inside an isolated environment (container or VM) and use a Python virtualenv to avoid global pip installs. (4) Consider running on Solana devnet/testnet first to validate behavior. (5) Limit the bot's privileges: prefer a wallet/signing setup that avoids exposing a raw long‑term private key if possible (hardware or remote signer), or rotate the private key after testing. (6) Monitor logs and network activity; be aware that any compromise of the environment or LLM key could affect decisions or leak operational metadata. If you are not comfortable exposing a hot private key, do not install.

Type: OpenClaw Skill Name: solana-sniper-bot Version: 1.0.0 The skill is classified as suspicious due to its inherent high-risk functionality, specifically the handling and use of the user's `SOLANA_PRIVATE_KEY` to sign and execute automated financial transactions via the Jupiter aggregator (`scripts/sniper.py`). While the code appears to align with its stated purpose of an autonomous trading bot and includes explicit security warnings in `SKILL.md` (e.g., 'Use a DEDICATED wallet', 'Never use your main wallet's private key'), the capability to perform automated, irreversible financial operations with a private key elevates it beyond benign. The instruction to copy the script to `/opt/sniper/` in `SKILL.md` also suggests a system-level integration, which, while not malicious in this context, adds to the overall risk profile.