4chad 🐸

Enables autonomous trading and token launching on Solana with AI agents, allowing users to manage assets and claim fees securely.

Install this skill

or

0/100

Security score

The 4chad 🐸 skill was audited on Feb 9, 2026 and we found 59 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 27

Curl to non-GitHub URL

SourceSKILL.md

27	curl -s https://4chad.xyz/skill.md > ~/.4chad/skills/SKILL.md

medium line 28

Curl to non-GitHub URL

SourceSKILL.md

28	curl -s https://4chad.xyz/launch.md > ~/.4chad/skills/LAUNCH.md

medium line 29

Curl to non-GitHub URL

SourceSKILL.md

29	curl -s https://4chad.xyz/trading.md > ~/.4chad/skills/TRADING.md

medium line 30

Curl to non-GitHub URL

SourceSKILL.md

30	curl -s https://4chad.xyz/fees.md > ~/.4chad/skills/FEES.md

medium line 31

Curl to non-GitHub URL

SourceSKILL.md

31	curl -s https://4chad.xyz/examples.md > ~/.4chad/skills/EXAMPLES.md

medium line 32

Curl to non-GitHub URL

SourceSKILL.md

32	curl -s https://4chad.xyz/sign-transaction.js > ~/.4chad/skills/sign-transaction.js

medium line 33

Curl to non-GitHub URL

SourceSKILL.md

33	curl -s https://4chad.xyz/skill.json > ~/.4chad/skills/skill.json

medium line 94

Curl to non-GitHub URL

SourceSKILL.md

94	curl -X POST https://4chad.xyz/api/v1/agent/keys/create \

medium line 122

Curl to non-GitHub URL

SourceSKILL.md

122	curl -O https://4chad.xyz/sign-transaction.js

medium line 133

Curl to non-GitHub URL

SourceSKILL.md

133	RESPONSE=$(curl -X POST https://4chad.xyz/api/v1/agent/token/create-transaction \

medium line 152

Curl to non-GitHub URL

SourceSKILL.md

152	curl -X POST https://4chad.xyz/api/v1/agent/transaction/submit \

medium line 210

Curl to non-GitHub URL

SourceSKILL.md

210	curl -X GET https://4chad.xyz/api/v1/agent/keys/list \

medium line 223

Curl to non-GitHub URL

SourceSKILL.md

223	curl "https://api.mainnet-beta.solana.com" \

low line 26

Access to hidden dotfiles in home directory

SourceSKILL.md

26	mkdir -p ~/.4chad/skills

low line 27

Access to hidden dotfiles in home directory

SourceSKILL.md

27	curl -s https://4chad.xyz/skill.md > ~/.4chad/skills/SKILL.md

low line 28

Access to hidden dotfiles in home directory

SourceSKILL.md

28	curl -s https://4chad.xyz/launch.md > ~/.4chad/skills/LAUNCH.md

low line 29

Access to hidden dotfiles in home directory

SourceSKILL.md

29	curl -s https://4chad.xyz/trading.md > ~/.4chad/skills/TRADING.md

low line 30

Access to hidden dotfiles in home directory

SourceSKILL.md

30	curl -s https://4chad.xyz/fees.md > ~/.4chad/skills/FEES.md

low line 31

Access to hidden dotfiles in home directory

SourceSKILL.md

31	curl -s https://4chad.xyz/examples.md > ~/.4chad/skills/EXAMPLES.md

low line 32

Access to hidden dotfiles in home directory

SourceSKILL.md

32	curl -s https://4chad.xyz/sign-transaction.js > ~/.4chad/skills/sign-transaction.js

low line 33

Access to hidden dotfiles in home directory

SourceSKILL.md

33	curl -s https://4chad.xyz/skill.json > ~/.4chad/skills/skill.json

low line 4

External URL reference

SourceSKILL.md

4	homepage: https://4chad.xyz

low line 5

External URL reference

SourceSKILL.md

5	metadata: {"openclaw": {"emoji": "🐸", "homepage": "https://4chad.xyz", "requires": {"env": ["SOLANA_PRIVATE_KEY"], "bins": ["node", "curl"]}, "primaryEnv": "SOLANA_PRIVATE_KEY"}}

low line 16

External URL reference

SourceSKILL.md

16	\| SKILL.md (this file) \| `https://4chad.xyz/skill.md` \|

low line 17

External URL reference

SourceSKILL.md

17	\| LAUNCH.md \| `https://4chad.xyz/launch.md` \|

low line 18

External URL reference

SourceSKILL.md

18	\| TRADING.md \| `https://4chad.xyz/trading.md` \|

low line 19

External URL reference

SourceSKILL.md

19	\| FEES.md \| `https://4chad.xyz/fees.md` \|

low line 20

External URL reference

SourceSKILL.md

20	\| EXAMPLES.md \| `https://4chad.xyz/examples.md` \|

low line 21

External URL reference

SourceSKILL.md

21	\| skill.json (metadata) \| `https://4chad.xyz/skill.json` \|

low line 22

External URL reference

SourceSKILL.md

22	\| sign-transaction.js \| `https://4chad.xyz/sign-transaction.js` \|

low line 27

External URL reference

SourceSKILL.md

27	curl -s https://4chad.xyz/skill.md > ~/.4chad/skills/SKILL.md

low line 28

External URL reference

SourceSKILL.md

28	curl -s https://4chad.xyz/launch.md > ~/.4chad/skills/LAUNCH.md

low line 29

External URL reference

SourceSKILL.md

29	curl -s https://4chad.xyz/trading.md > ~/.4chad/skills/TRADING.md

low line 30

External URL reference

SourceSKILL.md

30	curl -s https://4chad.xyz/fees.md > ~/.4chad/skills/FEES.md

low line 31

External URL reference

SourceSKILL.md

31	curl -s https://4chad.xyz/examples.md > ~/.4chad/skills/EXAMPLES.md

low line 32

External URL reference

SourceSKILL.md

32	curl -s https://4chad.xyz/sign-transaction.js > ~/.4chad/skills/sign-transaction.js

low line 33

External URL reference

SourceSKILL.md

33	curl -s https://4chad.xyz/skill.json > ~/.4chad/skills/skill.json

low line 60

External URL reference

SourceSKILL.md

60	2. 4chad API key - Generate at https://4chad.xyz/api-keys or via signature verification

low line 74

External URL reference

SourceSKILL.md

74	export SOLANA_RPC_URL="https://api.mainnet-beta.solana.com" # Optional

low line 94

External URL reference

SourceSKILL.md

94	curl -X POST https://4chad.xyz/api/v1/agent/keys/create \

low line 122

External URL reference

SourceSKILL.md

122	curl -O https://4chad.xyz/sign-transaction.js

low line 129

External URL reference

SourceSKILL.md

129	See [LAUNCH.md](https://4chad.xyz/launch.md) for complete token creation guide.

low line 133

External URL reference

SourceSKILL.md

133	RESPONSE=$(curl -X POST https://4chad.xyz/api/v1/agent/token/create-transaction \

low line 141

External URL reference

SourceSKILL.md

141	"imageUrl": "https://example.com/image.png",

low line 152

External URL reference

SourceSKILL.md

152	curl -X POST https://4chad.xyz/api/v1/agent/transaction/submit \

low line 162

External URL reference

SourceSKILL.md

162	See [TRADING.md](https://4chad.xyz/trading.md) for complete trading guide.

low line 166

External URL reference

SourceSKILL.md

166	See [FEES.md](https://4chad.xyz/fees.md) for fee claiming guide.

low line 172

External URL reference

SourceSKILL.md

172	4chad uses a single API base: https://4chad.xyz/api/v1

low line 210

External URL reference

SourceSKILL.md

210	curl -X GET https://4chad.xyz/api/v1/agent/keys/list \

low line 223

External URL reference

SourceSKILL.md

223	curl "https://api.mainnet-beta.solana.com" \

low line 299

External URL reference

SourceSKILL.md

299	\| [LAUNCH.md](https://4chad.xyz/launch.md) \| Token creation with Easy & Advanced modes \|

low line 300

External URL reference

SourceSKILL.md

300	\| [TRADING.md](https://4chad.xyz/trading.md) \| Swap any Solana token via Jupiter \|

low line 301

External URL reference

SourceSKILL.md

301	\| [FEES.md](https://4chad.xyz/fees.md) \| Claim creator trading fees \|

low line 302

External URL reference

SourceSKILL.md

302	\| [EXAMPLES.md](https://4chad.xyz/examples.md) \| Complete workflow examples (launch + trade + claim) \|

low line 321

External URL reference

SourceSKILL.md

321	- 🌐 Website: https://4chad.xyz

low line 322

External URL reference

SourceSKILL.md

322	- 📖 API Documentation: https://4chad.xyz/api-docs

low line 323

External URL reference

SourceSKILL.md

323	- 💬 Discord: https://discord.gg/4chad

low line 324

External URL reference

SourceSKILL.md

324	- 🐦 Twitter: https://x.com/4chad

low line 335

External URL reference

SourceSKILL.md

335	- RPC: Configurable (default: https://api.mainnet-beta.solana.com)

Scanned on Feb 9, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.2K

Rate this skill

Categorymarketing

UpdatedApril 4, 2026

openclaw api growth-marketer product-marketer sdr business-development sales-engineer marketing sales

openclaw/skills