Mi Trading

Trade tokens on Solana using the ClawDex CLI. Use when the user asks to swap tokens, check balances, get quotes, or manage a Solana trading wallet.

This skill's instructions perform exactly the kind of operations you'd expect for a Solana trading CLI, but the registry metadata omits the sensitive items the SKILL.md needs (JUPITER_API_KEY, RPC URL, and a local wallet file). Before installing or running: (1) verify the provenance of the 'clawdex' npm package (publisher, repository, audit its source) rather than blindly running npm install -g; (2) never point the tool at your main wallet — use a dedicated wallet with minimal funds for testing; (3) consider running the CLI in an isolated environment/container; (4) confirm whether JUPITER_API_KEY or other secrets are actually required and where they are sent; (5) ask the skill author or registry to update metadata to declare required env vars and config paths. If the registry metadata and a trustworthy upstream repo are provided (and code audit shows no exfiltration), the concern would be reduced.

Type: OpenClaw Skill Name: mi-trading Version: 1.0.0 The skill is designed for Solana DEX trading using the `clawdex` CLI tool. It instructs the agent to install `clawdex` via `npm install -g`, configure it with environment variables (`JUPITER_API_KEY`, `SOLANA_RPC_URL`) and a local wallet file (`~/.config/solana/id.json`), and then perform trading operations. All instructions in `SKILL.md` are directly related to the stated purpose, including safety guardrails and a recommended trading workflow. While the skill accesses sensitive data (API keys, wallet file) and installs a global package, this is necessary for its functionality and there is no evidence of intentional data exfiltration, unauthorized actions, or malicious prompt injection attempts against the agent. The risks are inherent to automated trading and dependency management, not malicious intent within the skill's design.