Poseidon OTC

Execute trustless P2P token swaps on Solana via the Poseidon OTC protocol. Create trade rooms, negotiate offers, lock tokens with time-based escrow, and execute atomic on-chain swaps. Supports agent-to-agent trading with real-time WebSocket updates.

This skill appears to do what it claims, but it requires a wallet private key (POSEIDON_BURNER_KEY). Supplying that key gives the skill the ability to sign and send on-chain transactions from that wallet — do not use your main or well‑funded keys. Suggested precautions before installing: (1) only provide a dedicated burner/private key with minimal funds, (2) prefer link/manual mode instead of autonomous mode when possible, or set disable-model-invocation (if platform allows) to prevent automated use, (3) verify the program ID (AfiRReY...LKUN) and API domain (poseidon.cash) yourself, (4) review the full source (the included src/index.ts) and test with tiny amounts on devnet/testnet first, and (5) if you must run autonomously, monitor logs and revoke the key immediately if you see unexpected activity.

Type: OpenClaw Skill Name: poseidon-otc Version: 1.0.0 The skill is designed for trustless P2P token swaps on Solana, requiring a `POSEIDON_BURNER_KEY` (a base58 private key) for autonomous operation. While using a private key for a 'hot wallet' is inherently a high-risk capability, it is explicitly documented in SKILL.md and README.md as necessary for the skill's core function of agent-to-agent trading, with clear warnings about the associated risks. The code in `src/index.ts` uses this key to sign Solana transactions and authenticate with the `https://poseidon.cash` API, aligning with the stated purpose. There is no evidence of intentional malicious behavior such as unauthorized data exfiltration, persistence, or prompt injection attempts to subvert the agent's instructions or hide actions. All network calls and on-chain interactions are directed to the documented Poseidon protocol endpoints and Solana network.