← 返回 Skills 市场
207
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tempo-stable-uniswap-swaps
功能描述
Tempo stablecoin and token swap operations for agents. Use when working with pathUSD/USDC.e balances, swapping between USDC.e and pathUSD, or executing any-t...
安全使用建议
This skill contains valid, actionable instructions to perform token swaps on Tempo, but it expects you to provide a PRIVATE_KEY (full control of the wallet) and an UNISWAP_API_KEY even though the published metadata did not declare those requirements — treat that as a red flag. Before using or installing:
- Do not supply your primary/private mainnet key. Use an ephemeral or tightly funded wallet, or a hardware wallet with manual signing. If you must provide PRIVATE_KEY to an automated agent, accept the risk that the agent could broadcast arbitrary transactions.
- Limit Permit2 approvals: avoid the unlimited/huge allowance pattern unless you understand and accept the exposure. Approve minimal amounts or use short expirations where supported.
- Verify endpoints and addresses: confirm RPC_URL, token addresses, Permit2 address, and Uniswap API host are correct and official for Tempo mainnet.
- Be cautious about running remote installers (the SKILL.md suggests curl | bash for Foundry). Prefer installing tools manually from verified sources or using package managers you trust.
- Consider asking the publisher to update the skill metadata to explicitly declare required env vars and binaries (PRIVATE_KEY, UNISWAP_API_KEY, cast/curl/jq) so risks are visible before install.
If you cannot accept these risks or cannot constrain the key/allowances, do not use this skill. If you proceed, test with a small amount or on a non-production wallet first.
功能分析
Type: OpenClaw Skill
Name: tempo-stable-uniswap-swaps
Version: 1.0.0
The skill facilitates token swaps on the Tempo network but exhibits high-risk patterns, including the requirement for a PRIVATE_KEY environment variable which is passed directly to shell commands via 'cast' in SKILL.md, potentially exposing sensitive credentials to process monitoring or shell history. It also includes a command to install Foundry via 'curl | bash', which is a high-risk execution pattern. While these behaviors are plausibly needed for the skill's stated purpose of executing blockchain transactions, the insecure handling of secrets and the use of untrusted remote scripts warrant a suspicious classification.
能力评估
Purpose & Capability
The SKILL.md describes exactly the stated purpose (Tempo swaps, pathUSD/USDC.e, Uniswap Trade API). However the registry metadata lists no required env vars or binaries while the SKILL.md explicitly requires PRIVATE_KEY, UNISWAP_API_KEY, and tools (cast/curl/jq). The missing declarations are an incoherence (likely sloppy metadata) that increases risk because sensitive requirements are not surfaced.
Instruction Scope
Runtime instructions tell the agent to use a PRIVATE_KEY to derive wallet addresses, build/send transactions, approve Permit2 with effectively unlimited allowance, call Uniswap trade API with an API key, and optionally run a remote Foundry installer. The instructions do not ask to read unrelated files, but they do perform high-impact actions (signing/broadcasting transactions and setting broad approvals) that require the user's private key and therefore carry high risk if misused.
Install Mechanism
There is no formal install spec (skill is instruction-only), which is low risk. But the SKILL.md suggests installing Foundry via a remote curl | bash from foundry.paradigm.xyz — an external installer executed from a script is higher-risk operationally (even if the host is a known provider). This should be considered when following the instructions.
Credentials
The env/credential needs in the instructions (PRIVATE_KEY and UNISWAP_API_KEY, optional RPC_URL) are plausible for a swap tool, but the registry metadata failing to declare them is a mismatch. The PRIVATE_KEY is extremely sensitive (gives full wallet control). UNISWAP_API_KEY is reasonable, RPC_URL optional. The skill also instructs granting very large Permit2 allowances — functional for swaps but increases exposure if keys are compromised.
Persistence & Privilege
The skill does not request always:true, does not supply an install that writes persistent code, and does not claim to modify other skills or global agent settings. Autonomous invocation is allowed (default) which increases blast radius when combined with PRIVATE_KEY access, but that default alone is not flagged per policy.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tempo-stable-uniswap-swaps - 安装完成后，直接呼叫该 Skill 的名称或使用
/tempo-stable-uniswap-swaps触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of tempo-stable-uniswap-swaps.
- Provides step-by-step instructions for swapping tokens (including pathUSD and USDC.e) via Uniswap on Tempo mainnet.
- Includes commands for balance checks, token transfers, Permit2 approvals, quoting, simulation, and broadcasting swaps.
- No external dependencies required beyond standard tools (`cast`, `curl`, `jq`).
- Outlines network and token specifics for Tempo, with caution for fee headroom on pathUSD transfers.
- Documents common error cases and resolutions.
元数据
常见问题
Tempo Stable + Uniswap Swaps 是什么？
Tempo stablecoin and token swap operations for agents. Use when working with pathUSD/USDC.e balances, swapping between USDC.e and pathUSD, or executing any-t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 207 次。
如何安装 Tempo Stable + Uniswap Swaps？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tempo-stable-uniswap-swaps」即可一键安装，无需额外配置。
Tempo Stable + Uniswap Swaps 是免费的吗？
是的，Tempo Stable + Uniswap Swaps 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Tempo Stable + Uniswap Swaps 支持哪些平台？
Tempo Stable + Uniswap Swaps 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tempo Stable + Uniswap Swaps？
由 aviclaw（@aviclaw）开发并维护，当前版本 v1.0.0。
推荐 Skills