中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 8/100
Last scan:2 days ago Rescan
8 /100
farming-planner
Plan yield farming and CAKE staking on PancakeSwap with deep links to the PancakeSwap interface
This is a legitimate PancakeSwap farming strategy planner from the official pancakeswap GitHub organization. All shell execution is documented, network access is restricted to known PancakeSwap endpoints, and the scripts perform only read-only blockchain data fetching.
Skill Namefarming-planner
Duration38.9s
Enginepi
✓
Safe to install
No action needed. The skill is safe to use.

Findings 2 items

Severity Finding Location
Low
Startup telemetry ping to pancakeswap.ai
Step 0 initializes by pinging https://pancakeswap.ai/api/ping with agent name, version, OS, arch, and timestamp. This is a common analytics pattern for skill usage tracking.
curl -s -o /dev/null --max-time 3 "https://pancakeswap.ai/api/ping?skill=pcs-farming-planner&version=1.1.1&agent=AGENT_NAME&ts=..."
→ Document the telemetry purpose in SKILL.md for full transparency. Current behavior is benign.
 SKILL.md:89
Low
requests library auto-install without version pinning
fetch-farms.py and fetch-syrup-pools.py auto-install requests via pip without version constraints.
subprocess.check_call([sys.executable, '-m', 'pip', 'install', '-q', 'requests'])
→ Pin to a specific version: pip install -q requests==2.31.0
 references/fetch-farms.py:5
ResourceDeclaredInferredStatusEvidence
Filesystem READ READ ✓ Aligned Read tool declared; no filesystem writes observed
Network READ READ ✓ Aligned WebFetch + Bash(curl:*) declared; all requests to whitelisted PancakeSwap domain…
Shell WRITE WRITE ✓ Aligned Bash(curl,jq,cast,python3,node,xdg-open,open) declared; all documented with spec…
Environment NONE NONE — No environment variable access beyond SOL_WALLET for Solana script
Skill Invoke NONE NONE — Task(subagent) declared; used only for subagent dispatch
Clipboard NONE NONE — No clipboard access
Browser WRITE WRITE ✓ Aligned xdg-open/open declared for deep links only
Database NONE NONE — No database access
96 findings
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/
SKILL.md:77
🔗
Medium External URL 外部 URL
https://pancakeswap.ai/api/ping?skill=pcs-farming-planner&version=1.1.1&agent=AGENT_NAME&ts=$(date
SKILL.md:91
💰
Medium Wallet Address 加密货币钱包地址
0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82
SKILL.md:126
💰
Medium Wallet Address 加密货币钱包地址
0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c
SKILL.md:127
💰
Medium Wallet Address 加密货币钱包地址
0x55d398326f99059fF775485246999027B3197955
SKILL.md:129
💰
Medium Wallet Address 加密货币钱包地址
0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d
SKILL.md:130
💰
Medium Wallet Address 加密货币钱包地址
0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56
SKILL.md:131
💰
Medium Wallet Address 加密货币钱包地址
0x2170Ed0880ac9A755fd29B2688956BD959F933F8
SKILL.md:132
💰
Medium Wallet Address 加密货币钱包地址
0x7130d2A12B9BCbFAe4f2634d864A1Ee1Ce3Ead9c
SKILL.md:133
💰
Medium Wallet Address 加密货币钱包地址
0x3203c9E46cA618C8C1cE5dC67e7e9D75f5da2377
SKILL.md:134
💰
Medium Wallet Address 加密货币钱包地址
0x1D2F0da169ceB9fC7B3144628dB156f3F6c60dBE
SKILL.md:135
💰
Medium Wallet Address 加密货币钱包地址
0x3EE2200Efb3400fAbB9AacF31297cBdD1d435D47
SKILL.md:136
💰
Medium Wallet Address 加密货币钱包地址
0xbA2aE424d960c26247Dd6c32edC70B295c744C43
SKILL.md:137
💰
Medium Wallet Address 加密货币钱包地址
0x7083609fCE4d1d8Dc0C979AAb8c869Ea2C873402
SKILL.md:138
💰
Medium Wallet Address 加密货币钱包地址
0xF8A0BF9cF54Bb92F17374d9e9A321E6a111a51bD
SKILL.md:139
💰
Medium Wallet Address 加密货币钱包地址
0xBf5140A22578168FD562DCcF235E5D43A02ce9B1
SKILL.md:140
💰
Medium Wallet Address 加密货币钱包地址
0x4B0F1812e5Df2A09796481Ff14017e6005508003
SKILL.md:141
💰
Medium Wallet Address 加密货币钱包地址
0x4200000000000000000000000000000000000006
SKILL.md:147
💰
Medium Wallet Address 加密货币钱包地址
0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
SKILL.md:149
💰
Medium Wallet Address 加密货币钱包地址
0xd9aAEc86B65D86f6A7B5B1b0c42FFA531710b6CA
SKILL.md:150
💰
Medium Wallet Address 加密货币钱包地址
0x50c5725949A6F0c72E6C4a641F24049A917DB0Cb
SKILL.md:151
💰
Medium Wallet Address 加密货币钱包地址
0xcbB7C0000aB88B473b1f5aFd9ef808440eed33Bf
SKILL.md:152
💰
Medium Wallet Address 加密货币钱包地址
0xcb585250f852c6c6bf90434ab21a00f02833a4af
SKILL.md:153
💰
Medium Wallet Address 加密货币钱包地址
0x940181a94A35A4569E4529A3CDfB74e38FD98631
SKILL.md:154
💰
Medium Wallet Address 加密货币钱包地址
0x0b3e328455c4059EEb9e3f84b5543F74E24e7E1b
SKILL.md:155
💰
Medium Wallet Address 加密货币钱包地址
0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2
SKILL.md:161
💰
Medium Wallet Address 加密货币钱包地址
0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48
SKILL.md:162
💰
Medium Wallet Address 加密货币钱包地址
0xdAC17F958D2ee523a2206206994597C13D831ec7
SKILL.md:163
💰
Medium Wallet Address 加密货币钱包地址
0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599
SKILL.md:164
💰
Medium Wallet Address 加密货币钱包地址
0x82aF49447D8a07e3bd95BD0d56f35241523fBab1
SKILL.md:178
💰
Medium Wallet Address 加密货币钱包地址
0xaf88d065e77c8cC2239327C5EDb3A432268e5831
SKILL.md:179
💰
Medium Wallet Address 加密货币钱包地址
0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9
SKILL.md:180
💰
Medium Wallet Address 加密货币钱包地址
0x2f2a2543B76A4166549F7aaB2e75Bef0aefC5B0f
SKILL.md:181
💰
Medium Wallet Address 加密货币钱包地址
0x912CE59144191C1204E64559FE8253a0e49E6548
SKILL.md:182
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/
SKILL.md:192
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/stable/add/
SKILL.md:195
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/add/
SKILL.md:198
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c...
SKILL.md:212
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/add/bsc/infinity/0xcbc43b950eb089f1b28694324e76336542f1c158ec955921704cebaa53a278b...
SKILL.md:213
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82/0x55d398326f99059fF775485246999027B3197955/25...
SKILL.md:214
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c/0x55d398326f99059fF775485246999027B3197955/25...
SKILL.md:215
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/0x2170Ed0880ac9A755fd29B2688956BD959F933F8/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c/25...
SKILL.md:216
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/0x7130d2A12B9BCbFAe4f2634d864A1Ee1Ce3Ead9c/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c/25...
SKILL.md:217
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/stable/add/0x55d398326f99059fF775485246999027B3197955/0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd...
SKILL.md:218
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/0x3203c9E46cA618C8C1cE5dC67e7e9D75f5da2377/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c...
SKILL.md:219
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/0x1D2F0da169ceB9fC7B3144628dB156f3F6c60dBE/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c...
SKILL.md:220
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/0x3EE2200Efb3400fAbB9AacF31297cBdD1d435D47/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c...
SKILL.md:221
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/pools?chain=bsc
SKILL.md:227
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/pools
SKILL.md:228
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/cake-staking
SKILL.md:229
🔗
Medium External URL 外部 URL
https://bsc-dataseed1.binance.org
SKILL.md:246
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/pools?chain=bsc&search=
SKILL.md:249
💰
Medium Wallet Address 加密货币钱包地址
0xa5f8C5Dbd5F286960b9d90548680aE5ebFf07652
SKILL.md:257
💰
Medium Wallet Address 加密货币钱包地址
0x556B9306565093C855AEA9AE92A594704c2Cd59e
SKILL.md:258
💰
Medium Wallet Address 加密货币钱包地址
0x26Bde0AC5b77b65A402778448eCac2aCaa9c9115
SKILL.md:259
💰
Medium Wallet Address 加密货币钱包地址
0xEA8620aAb2F07a0ae710442590D649ADE8440877
SKILL.md:260
💰
Medium Wallet Address 加密货币钱包地址
0x46A15B0b27311cedF172AB29E4f4766fbE7F4364
SKILL.md:262
🔗
Medium External URL 外部 URL
https://infinity.pancakeswap.com/farms/campaigns/
SKILL.md:278
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/list?orderBy=volumeUSD24h&protocols=v2&protocols=v3&protocols=stable&p...
SKILL.md:299
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/list?orderBy=volumeUSD24h&protocols=v2&protocols=v3&protocols=stable&p...
SKILL.md:302
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/list?orderBy=volumeUSD24h&protocols=v2&protocols=v3&protocols=stable&p...
SKILL.md:305
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/list?orderBy=volumeUSD24h&protocols=v3&chains=bsc&limit=100
SKILL.md:308
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/list?orderBy=volumeUSD24h&protocols=v2&protocols=v3&protocols=stable&p...
SKILL.md:311
🔗
Medium External URL 外部 URL
https://explorer.pancakeswap.com/api/cached/pools/farming?protocols=v2&protocols=v3&protocols=stable&protocols=infinityB...
SKILL.md:317
🔗
Medium External URL 外部 URL
https://sol-explorer.pancakeswap.com/api/cached/v1/pools/list?orderBy=volumeUSD24h&protocols=v3&limit=100
SKILL.md:320
💰
Medium Wallet Address 加密货币钱包地址
0xa0FfB9c1CE1Fe56963B0321B32E7A0302114058b
SKILL.md:360
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/add/bsc/infinity/
SKILL.md:368
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/add/bsc/infinity/0xcbc43b950eb089f1b28694324e76336542f1c158ec955921704cebaa53a278b...
SKILL.md:372
🔗
Medium External URL 外部 URL
https://api.coingecko.com/api/v3/simple/price?ids=pancakeswap-token&vs_currencies=usd
SKILL.md:379
🔗
Medium External URL 外部 URL
https://mainnet.base.org
SKILL.md:435
🔗
Medium External URL 外部 URL
https://infinity.pancakeswap.com/farms/users/56/$
SKILL.md:722
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/positions?network=8000001001
SKILL.md:762
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/positions?chain=bsc
SKILL.md:770
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/...
SKILL.md:778
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/0x55d398326f99059fF775485246999027B3197955/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c...
SKILL.md:790
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/add/0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c/0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82/25...
SKILL.md:830
💰
Medium Wallet Address 加密货币钱包地址
0x5AEa5775959fBC2557Cc8789bC1bf90A239D9a91
references/fetch-farms.py:17
💰
Medium Wallet Address 加密货币钱包地址
0x5e09ACf80C0296740eC5d6F643005a4ef8DaA694
references/fetch-farms.py:22
💰
Medium Wallet Address 加密货币钱包地址
0xC6A2Db661D5a5690172d8eB0a7DEA2d3008665A3
references/fetch-farms.py:23
💰
Medium Wallet Address 加密货币钱包地址
0x4c615E78c5fCA1Ad31e4d66eb0D8688d84307463
references/fetch-farms.py:24
🔗
Medium External URL 外部 URL
https://bsc-rpc.publicnode.com
references/fetch-farms.py:27
🔗
Medium External URL 外部 URL
https://ethereum-rpc.publicnode.com
references/fetch-farms.py:28
🔗
Medium External URL 外部 URL
https://arbitrum-one-rpc.publicnode.com
references/fetch-farms.py:29
🔗
Medium External URL 外部 URL
https://base-rpc.publicnode.com
references/fetch-farms.py:30
🔗
Medium External URL 外部 URL
https://zksync-era-rpc.publicnode.com
references/fetch-farms.py:31
💰
Medium Wallet Address 加密货币钱包地址
0x0000000000000000000000000000000000000000
references/fetch-farms.py:33
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/liquidity/pools?chain=
references/fetch-farms.py:151
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/v2/add/
references/fetch-farms.py:155
🔗
Medium External URL 外部 URL
https://api-v3.raydium.io/mint/list
references/fetch-solana.cjs:39
🔗
Medium External URL 外部 URL
https://tokens.pancakeswap.finance/pancakeswap-solana-default.json
references/fetch-solana.cjs:40
🔗
Medium External URL 外部 URL
https://sol-explorer.pancakeswap.com/api
references/fetch-solana.cjs:81
🔗
Medium External URL 外部 URL
https://api.mainnet-beta.solana.com
references/fetch-solana.cjs:158
🔗
Medium External URL 外部 URL
https://api.dexscreener.com/latest/dex/tokens/
references/fetch-syrup-pools.py:18
🔗
Medium External URL 外部 URL
https://configs.pancakeswap.com/api/data/cached/syrup-pools?chainId=56&isFinished=false
references/fetch-syrup-pools.py:41
💰
Medium Wallet Address 加密货币钱包地址
0x0e09fabb73bd3ade0a17ecc321fd13a19e81ce82
references/fetch-syrup-pools.py:47
🔗
Medium External URL 外部 URL
https://pancakeswap.finance/pools?chain=bsc
references/fetch-syrup-pools.py:88

File Tree

4 files · 62.1 KB · 1472 lines
Markdown 1f · 914L Python 2f · 323L JavaScript 1f · 235L
├─ ▾ 📁 references
│ ├─ 🐍 fetch-farms.py Python 231L · 9.8 KB
│ ├─ 📜 fetch-solana.cjs JavaScript 235L · 7.0 KB
│ └─ 🐍 fetch-syrup-pools.py Python 92L · 3.5 KB
└─ 📝 SKILL.md Markdown 914L · 41.8 KB

Dependencies 4 items

PackageVersionSourceKnown VulnsNotes
requests * pip No Version not pinned; auto-installed in scripts
@pancakeswap/solana-core-sdk * npm No Required by fetch-solana.cjs for Solana CLMM position queries
@solana/web3.js * npm No Required by fetch-solana.cjs for Solana blockchain queries
bn.js * npm No Required by fetch-solana.cjs for big number handling

Security Positives

✓ Comprehensive shell safety documentation with single-quote variable assignment and regex input validation
✓ URL allowlist restricts curl to only verified PancakeSwap domains (explorer.pancakeswap.com, infinity.pancakeswap.com, api.coingecko.com, etc.)
✓ Explicit private key warnings recommending Foundry keystore instead of CLI flags
✓ All blockchain queries are read-only (eth_call); no eth_sendTransaction or private key usage in scripts
✓ Token addresses validated with regex patterns (0x[0-9a-fA-F]{40}) before use in shell commands
✓ Proper Solana wallet validation (base58 format) documented separately from EVM addresses
✓ Scripts fetch only public on-chain data via RPC; no credential harvesting or environment variable enumeration
✓ Strong anti-patterns section preventing common mistakes (no hardcoded APR, no private key exposure)