← Back to Skills Marketplace
SUPAH DeFi Optimizer
by
supah-based
· GitHub ↗
· v1.3.0
· MIT-0
126
Downloads
0
Stars
1
Active Installs
4
Versions
Install in OpenClaw
/install supah-defi-optimizer
Description
DeFi yield optimization, impermanent loss tracking, and portfolio management for Base blockchain. Find the best yields, monitor LP positions, and optimize De...
Usage Guidance
This skill appears to implement the described DeFi features, but note two practical risks before installing: (1) Each call triggers an x402 micropayment to the embedded address (check and accept the payTo address and costs; set limits). (2) The SUPAH_API_BASE env var can override the API host — only set it to a trusted URL (default is https://api.supah.ai). Recommended steps: verify the publisher (look up the GitHub repo or the official supah.ai site), run the included index.js in a sandbox to inspect responses, restrict agent autonomy or set a per-call budget so the agent cannot make many paid calls automatically, and avoid providing private keys or wallet secrets to this skill. If you rely on a corporate or controlled environment, have an operator review the payTo address and x402 client behavior first.
Capability Assessment
Purpose & Capability
Name/description, API endpoints, and bundled index.js align with a DeFi optimizer for Base. Requiring node is expected. Requiring curl (declared in SKILL.md) is unnecessary given the included index.js uses Node's https — this is a minor mismatch but not proof of malicious intent. The SUPAH_API_BASE env var is a reasonable override for the API base URL.
Instruction Scope
SKILL.md and index.js only call the SUPAH API for wallet/position data — no file system or secret harvesting. However, SKILL.md specifies an automatic x402 micropayment model and embeds a payTo address; the agent's 'x402-compatible HTTP client pays automatically' implies the skill will trigger value transfers on each call. That is out-of-band behavior (economic transfers) that users should treat as a risk. Also, while SKILL.md metadata restricts outbound host to api.supah.ai, the code honors SUPAH_API_BASE if set — a maliciously set env var could redirect traffic to another host.
Install Mechanism
There is no download/install script; this is instruction-only with a small node script included. Nothing in the install surface writes arbitrary archives or executes remote installers. Risk from install mechanism is low.
Credentials
The skill only requests one env var (SUPAH_API_BASE) and no secrets, which is proportionate. Caveat: SUPAH_API_BASE can be used to point the skill at any endpoint if the user sets it, so ensure it's set only to the official API. The embedded x402 payTo address is not a secret but encodes where user funds will be sent — this is a non-credential risk (financial outflow) and should be acknowledged.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no system config paths. It can be invoked autonomously (platform default), which combined with the micropayment behavior increases the blast radius if the agent is allowed to act without limits.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install supah-defi-optimizer - After installation, invoke the skill by name or use
/supah-defi-optimizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Removed all API key references, free tiers, subscription pricing. x402 only.
v1.2.0
Security: declared required bins, env vars, outbound network, x402 payment details in metadata.
v1.1.0
x402 only: removed free tier and subscriptions, added Moralis attribution
v1.0.0
Initial release: Yield route optimization. x402 micropayments.
Metadata
Frequently Asked Questions
What is SUPAH DeFi Optimizer?
DeFi yield optimization, impermanent loss tracking, and portfolio management for Base blockchain. Find the best yields, monitor LP positions, and optimize De... It is an AI Agent Skill for Claude Code / OpenClaw, with 126 downloads so far.
How do I install SUPAH DeFi Optimizer?
Run "/install supah-defi-optimizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is SUPAH DeFi Optimizer free?
Yes, SUPAH DeFi Optimizer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does SUPAH DeFi Optimizer support?
SUPAH DeFi Optimizer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created SUPAH DeFi Optimizer?
It is built and maintained by supah-based (@supah-based); the current version is v1.3.0.
More Skills