Outsmart LP Sniping

Buy tokens at or near LP creation on Solana. Use when: user asks about sniping, bonding curve graduation, migration, new pool, LP created, pump fun graduatio...

This skill appears to be what it says (a CLI-driven sniping helper) but requires your private key and installs an npm package. Before installing/use: 1) Inspect the npm package and its GitHub repo (check maintainers, recent commits, and releases). 2) Prefer running the CLI locally in an isolated environment; do not paste your main private key into unknown machines. 3) Consider using an ephemeral key or a signing service/hardware wallet with limited funds for testing. 4) Verify the MAINNET_ENDPOINT is trusted (don’t use third-party endpoints you don’t control). 5) Be aware of legal/ethical and financial risks of front-running/MEV and high-risk token launches. If you cannot audit the CLI source, treat this as higher risk and avoid providing your main PRIVATE_KEY.

Type: OpenClaw Skill Name: outsmart-lp-sniping Version: 1.0.0 The skill is classified as suspicious due to its high-risk nature and reliance on external dependencies. It requires sensitive environment variables like `PRIVATE_KEY` and `MAINNET_ENDPOINT` for cryptocurrency trading, which, while necessary for its stated purpose, presents a significant attack surface. Furthermore, the skill installs and relies on an external `outsmart` CLI via `npm`, introducing a supply chain risk where a compromised dependency could lead to financial loss. No direct malicious prompt injection, data exfiltration, or backdoor attempts were found within the provided `SKILL.md` or `_meta.json` files, but the inherent risks associated with automated trading using a private key warrant a 'suspicious' classification.