n0ir DeFi Yield Scout

Scan and compare USDC yield farming options on Base and Arbitrum with APY rankings, breakeven analysis, historical trends, and protocol risk summaries.

This skill appears to do what it says: it queries DeFiLlama, filters to a small whitelist of protocols, and presents scan/breakeven/history analyses. Before installing, consider: (1) the source and homepage are unknown — verify you trust the publisher and review the included Python file yourself; (2) the skill fetches live data from yields.llama.fi and writes a cache file in your temp directory (not sensitive, but note it persists data for 15 minutes); and (3) this is informational only — always verify on-chain before moving funds. No credentials are requested, and there are no downloads or unusual privileges.

Type: OpenClaw Skill Name: n0ir-defi-yield-scout Version: 1.0.0 The OpenClaw skill 'n0ir-defi-yield-scout' is classified as benign. While it requests powerful `Bash` and `Read` tool permissions in `SKILL.md`, these are used for their stated purpose: `Bash` to execute the local `scripts/yield_scout.py` Python script, and `Read` to access local documentation (`references/protocols.md`). The Python script itself (`scripts/yield_scout.py`) uses standard libraries, connects only to the expected DeFiLlama API, and handles file caching in `tempfile`. There is no evidence of data exfiltration, persistence mechanisms, obfuscation, or prompt injection attempts in `SKILL.md` designed to subvert the agent's behavior or access unauthorized resources. The code logic is straightforward and aligns with the skill's described functionality.