Uniswap Driver

SUSPICIOUS: the skill’s stated purpose fits Uniswap, and publisher ownership appears authentic, but the actual install path depends on a third-party skills CLI and transitive skill loading outside this repo. No direct malicious behavior or credential exfiltration is evidenced in the stub, yet the external unpinned install chain and finance-adjacent action scope make this medium risk.