DeFi liquidity management on Uniswap and Aerodrome, live on Base, Unichain, and Optimism. Deploy concentrated liquidity positions with automated rebalancing,...
Security Analysis
high confidenceThe skill's code, instructions, and requirements are consistent with a CLI wrapper that talks to Arcadia's remote MCP API to build unsigned DeFi transactions; nothing requested is disproportionate to that purpose.
Name/description (DeFi liquidity management) matches the provided CLI wrapper (arcadia.sh), the read/write operations, and the contracts list. Declared required binaries (curl, jq) are exactly what the script needs; no unrelated credentials or binaries are requested.
SKILL.md instructs the agent to run the included shell CLI which makes HTTP calls to a remote MCP endpoint and sends public wallet/account addresses and unsigned transaction parameters. This matches the stated purpose, but it does transmit transaction data to a remote server (the skill documents this and warns not to share private keys). The instructions do not ask the agent to read local secrets or unrelated system files.
There is no install spec (instruction-only plus a small bundled shell script). Nothing is downloaded or extracted from arbitrary URLs and no third-party packages are automatically installed.
The skill does not require credentials. It optionally honors ARCADIA_MCP_URL to override the MCP endpoint (documented in SKILL.md) though that env var is not listed as 'required' which is acceptable because it's optional. No secrets/keys are requested.
always is false and the skill does not request elevated or persistent platform privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Guidance
This skill appears internally consistent and acts as a thin CLI that forwards public addresses and unsigned tx params to Arcadia's MCP server. Before installing: (1) Verify the MCP endpoint and project (https://arcadia.finance, docs, GitHub) so you trust the remote server; (2) never provide private keys or paste secrets into tool arguments — sign transactions locally or via a trusted wallet-signing service as described; (3) consider testing on a small amount or a testnet first; (4) if you need stronger assurance, review the upstream source (repo, audits) for the MCP server and contracts referenced in contracts.md.
Latest Release
v1.1.2
arcadia-finance v1.1.2 - Documentation updates in SKILL.md and contracts.md - No functional or API changes; usage and commands remain the same - Maintains compatibility with previous versions
Popular Skills
Published by @thomas-smets on ClawHub
