full-lp-workflow
What this skill does
This skill is an AI agent workflow for managing liquidity provider (LP) strategies on decentralized finance (DeFi) platforms like Uniswap. It automates the process of finding LP opportunities, designi
github/leoyeai - Excessive Agency / Unrestricted Access - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=full-lp-workflowAssessments (2)
Excessive Agency / Unrestricted Access
Excessive Agency / Unrestricted Access via local-llm-review
SKILL.md
The skill description states it 'autonomously finds the best LP opportunity, designs a strategy, assesses risk, executes any needed swaps, enters the position, and reports portfolio impact.' This implLack of Transparency / Obfuscation
Lack of Transparency / Obfuscation via local-llm-review
_meta.json
The 'commit' field points to a specific GitHub commit, but the source of the skill is hosted on a different repository (https://github.com/wpank/Agentic-Uniswap). This could be a red flag if the commiBadge
Add the Anomity scan badge for full-lp-workflow to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of full-lp-workflow? Report an issue or request a rescan.
