技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 25 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：aviclaw/tempo-stable-uniswap-swaps
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions are coherent with a Tempo/Uniswap swapping tool, but the manifest omits high-risk requirements (PRIVATE_KEY, UNISWAP_API_KEY, cast/foundry) and the runtime guidance asks you to run remote installs and grant broad token approvals — these mismatches and sensitive actions warrant caution.
目的
The SKILL.md describes exactly the stated purpose (Tempo swaps, pathUSD/USDC.e, Uniswap Trade API). However the registry metadata lists no required env vars or binaries while the SKILL.md explicitly requires PRIVATE_KEY, UNISWAP_API_KEY, and tools (cast/curl/jq). The missing declarations are an incoherence (likely sloppy metadata) that increases risk because sensitive requirements are not surfaced.
说明范围
Runtime instructions tell the agent to use a PRIVATE_KEY to derive wallet addresses, build/send transactions, approve Permit2 with effectively unlimited allowance, call Uniswap trade API with an API key, and optionally run a remote Foundry installer. The instructions do not ask to read unrelated files, but they do perform high-impact actions (signing/broadcasting transactions and setting broad approvals) that require the user's private key and…
安装机制
There is no formal install spec (skill is instruction-only), which is low risk. But the SKILL.md suggests installing Foundry via a remote curl | bash from foundry.paradigm.xyz — an external installer executed from a script is higher-risk operationally (even if the host is a known provider). This should be considered when following the instructions.
证书
The env/credential needs in the instructions (PRIVATE_KEY and UNISWAP_API_KEY, optional RPC_URL) are plausible for a swap tool, but the registry metadata failing to declare them is a mismatch. The PRIVATE_KEY is extremely sensitive (gives full wallet control). UNISWAP_API_KEY is reasonable, RPC_URL optional. The skill also instructs granting very large Permit2 allowances — functional for swaps but increases exposure if keys are compromised.
持久
The skill does not request always:true, does not supply an install that writes persistent code, and does not claim to modify other skills or global agent settings. Autonomous invocation is allowed (default) which increases blast radius when combined with PRIVATE_KEY access, but that default alone is not flagged per policy.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Tempo Stable + Uniswap Swaps」。简介：Tempo stablecoin and token swap operations for agents. Use when working with pa…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aviclaw/tempo-stable-uniswap-swaps/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。