Skip to main content

pond3r-skill

Queries crypto intelligence for DeFi data, stablecoin yields, and market analysis using Pond3r's curated datasets.

Install this skill

or
56/100

Security score

The pond3r-skill skill was audited on Feb 16, 2026 and we found 14 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 44

Template literal with variable interpolation in command context

SourceSKILL.md
44- Some clients support `Authorization: Bearer ${POND3R_API_KEY}` if that env var is set
medium line 24

Access to .env file

SourceSKILL.md
24| **OpenClaw (Docker/Telegram)** | Use the **CLI scripts** below. They call Pond3r MCP via HTTP. Set `POND3R_API_KEY` in `.env`; the agent runs the scripts and parses JSON output. |
medium line 75

Access to .env file

SourceSKILL.md
75When MCP tools are not available (e.g. OpenClaw/Telegram), use these scripts. They call Pond3r MCP over HTTP. **Requires `POND3R_API_KEY` in env** (e.g. in `.env` loaded by docker-compose).
medium line 114

Access to .env file

SourceSKILL.md
114- `Missing required env var: POND3R_API_KEY` → Add `POND3R_API_KEY` to `.env` and ensure it is loaded (e.g. docker-compose `env_file: .env`).
medium line 195

Access to .env file

SourceSKILL.md
195| Agent runs in OpenClaw/Telegram | Use the CLI scripts with `POND3R_API_KEY` in .env. See [CLI Scripts](#cli-scripts-openclaw--any-runtime). |
low line 12

External URL reference

SourceSKILL.md
12- **API key**: Obtain at [makeit.pond3r.xyz/api-keys](https://makeit.pond3r.xyz/api-keys)
low line 32

External URL reference

SourceSKILL.md
32| URL | `https://mcp.pond3r.xyz/mcp` |
low line 41

External URL reference

SourceSKILL.md
41- **URL**: `https://mcp.pond3r.xyz/mcp`
low line 43

External URL reference

SourceSKILL.md
43- Replace `<YOUR_POND3R_API_KEY>` with your key from [makeit.pond3r.xyz/api-keys](https://makeit.pond3r.xyz/api-keys)
low line 53

External URL reference

SourceSKILL.md
53https://mcp.pond3r.xyz/mcp \
low line 64

External URL reference

SourceSKILL.md
64"url": "https://mcp.pond3r.xyz/mcp",
low line 202

External URL reference

SourceSKILL.md
202- required server URL (`https://mcp.pond3r.xyz/mcp`)
low line 211

External URL reference

SourceSKILL.md
211- **Create report**: `POST https://api.pond3r.xyz/v1/api/reports` with `description`, `schedule`, `delivery_format`
low line 212

External URL reference

SourceSKILL.md
212- **Get latest**: `GET https://api.pond3r.xyz/v1/api/reports/{reportId}/latest`
Scanned on Feb 16, 2026
View Security Dashboard