Uniswap Submit Limit Order

Submit a UniswapX Dutch auction limit order. Use when user wants to set a limit price, get MEV-protected execution, or submit an order that fills at the best available price. No gas cost until filled.

This skill appears to implement UniswapX limit orders but has unclear trust boundaries. Before installing or enabling it: 1) Confirm how signing and account access are handled — which wallet/account will be used and whether the connector requires long-lived credentials. 2) Ask the platform whether the trade-executor subagent will ask the user for explicit confirmation before submitting any on‑chain transaction. 3) Verify the source of any external install (README points to a GitHub npx install) and avoid running external installers you don't trust. 4) Test with minimal amounts and check safety/allowlist configuration (who controls it?). 5) If you need stronger guarantees, request the skill declare required credentials and an explicit consent/auth flow or provide the trade-executor's audited contract/connector details. If you cannot get clear answers about authentication and consent, treat the skill as higher-risk and prefer manual execution instead of autonomous invocation.

Type: OpenClaw Skill Name: submit-limit-order Version: 0.1.0 The skill bundle is designed for a legitimate financial operation (UniswapX limit orders). However, the `SKILL.md` file explicitly grants the AI agent access to powerful file system tools (`Read`, `Glob`, `Grep`) via the `allowed-tools` directive. While the skill's workflow does not instruct the agent to use these tools for malicious purposes, their inclusion creates a significant vulnerability to prompt injection attacks, allowing an attacker to potentially leverage the agent to read sensitive files or enumerate the file system, which is a risky capability not strictly necessary for the stated purpose.