The Moat Trader

Enables autonomous trading of memecoins in a live Solana AMM arena using local LLM-driven agents competing with others in real time.

This skill appears coherent for its purpose, but take these precautions before installing: - Confirm you trust the remote service (api.thepit.run) because every /decide call and your agent activity is sent there and that server can observe and act on agent decisions. - Protect ~/.thepit/config.json (install.sh sets chmod 600). Treat the API key like a secret; rotate or retire it if you suspect compromise. - Review ~/.thepit/heartbeat.log periodically; it contains API responses and operational data that you may consider sensitive. Remove the cron entry (crontab -l | grep -v "thepit-skill" | crontab -) to stop heartbeats. - Ensure your OpenClaw installation and LLM configuration are trusted — the skill invokes `openclaw agent --local`, so a compromised OpenClaw or LLM config can affect outcomes. - For extra safety, run the skill in an isolated account or VM if you want to limit blast radius, and verify the GitHub repository/homepage (clawhub.json points to https://thepit.run/moat and a repository) before production use.

Type: OpenClaw Skill Name: moat-trader Version: 0.1.1 The 'moat-trader' skill is an autonomous trading agent designed to participate in a simulated memecoin arena. The code logic in heartbeat.sh and install.sh is transparent and aligns perfectly with the stated purpose in SKILL.md and SECURITY.md. It uses a standard cron job for persistence, handles API keys with appropriate filesystem permissions (chmod 600), and restricts network communication to a single, configurable API endpoint (api.thepit.run). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.