@axisagent/cli 0.1.0

package/dist/skillRegistry.js

@@ -0,0 +1,707 @@
+import { assertSkillDefinition, validateSafetyRules } from "./schema.js";
+const approvalDefaults = {
+    defaultMode: "approval-required",
+    requiresApproval: true,
+    networkAccess: true,
+    walletWrite: true,
+    secrets: [],
+    maxSpendUsd: 250,
+    sessionLimitMinutes: 30
+};
+const readOnlyDefaults = {
+    defaultMode: "read-only",
+    requiresApproval: false,
+    networkAccess: true,
+    walletWrite: false,
+    secrets: [],
+    maxSpendUsd: null,
+    sessionLimitMinutes: 30
+};
+export const skills = [
+    {
+        id: "base-mcp-wallet-ops",
+        title: "Base MCP Wallet Ops",
+        category: "Base",
+        summary: "Connect local agents to Base Account wallet reads, sends, swaps, signatures, and transaction history with explicit approval gates.",
+        useWhen: "Use when a user wants Claude, Codex, Cursor, or OpenClaw to operate a Base wallet without exposing private keys to the frontend.",
+        chains: ["Base"],
+        protocols: ["Base MCP"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw", "generic-mcp"],
+        source: "https://docs.base.org/ai-agents/index",
+        tokenUtility: "AXIS unlocks multi-agent wallet policy sync and higher simulation limits.",
+        auditNotes: ["No private key storage", "Every wallet write requires approval", "Transaction preview is mandatory"],
+        operations: ["read balances", "send tokens", "prepare swaps", "sign messages", "fetch transaction history"],
+        tests: ["reject send without approval", "render transaction preview before signing"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], humanReadableRule: "Wallet writes on Base require explicit user approval before signing." }
+    },
+    {
+        id: "base-contract-call-builder",
+        title: "Base Contract Call Builder",
+        category: "Base",
+        summary: "Build unsigned calldata for Base contracts, batch calls, and policy-gated protocol interactions before a wallet signs.",
+        useWhen: "Use when an agent needs to prepare contract interactions but the user wants to inspect calldata, target address, and value first.",
+        chains: ["Base"],
+        protocols: ["Base MCP"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview", "contract-call"],
+        installTargets: ["codex", "claude", "openclaw", "generic-mcp"],
+        source: "https://docs.base.org/ai-agents/index",
+        tokenUtility: "AXIS pays for verified ABI labels and high-risk simulation batches.",
+        auditNotes: ["ABI source shown", "Target address allowlist supported", "Blocks unknown payable calls by default"],
+        operations: ["build calldata", "batch contract calls", "preview value transfer", "decode ABI", "enforce allowlist"],
+        tests: ["block unknown target", "decode calldata before approval"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 100, humanReadableRule: "Unknown contract calls are blocked until the user reviews target, calldata, and value." }
+    },
+    {
+        id: "x402-base-payments",
+        title: "x402 Base Payments",
+        category: "Agent Payments",
+        summary: "Let local agents discover and pay x402-enabled APIs with Base USDC while enforcing per-call and session budgets.",
+        useWhen: "Use when an agent needs to pay for API calls, gated content, or services without getting unlimited wallet access.",
+        chains: ["Base"],
+        protocols: ["x402", "USDC"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview", "paid-api"],
+        installTargets: ["codex", "claude", "openclaw", "generic-mcp"],
+        source: "https://docs.cdp.coinbase.com/agentic-wallet/mcp/welcome",
+        tokenUtility: "AXIS holders can create shared team budgets for paid agent calls.",
+        auditNotes: ["Per-call cap required", "Receipts logged locally", "No recurring spend without approval"],
+        operations: ["discover paid API", "quote x402 price", "pay with USDC", "write receipt", "enforce budget"],
+        tests: ["reject payment above cap", "log receipt after payment"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 20, humanReadableRule: "Paid API calls require a visible quote and cannot exceed the configured x402 budget." }
+    },
+    {
+        id: "coinbase-agentkit-actions",
+        title: "Coinbase AgentKit Actions",
+        category: "Developer Ops",
+        summary: "Package Coinbase AgentKit action providers as portable local-agent tools with schemas and framework adapters.",
+        useWhen: "Use when a builder wants to expose wallet-aware actions to LangChain, MCP, or custom local agents with consistent schemas.",
+        chains: ["Base", "Ethereum"],
+        protocols: ["Coinbase AgentKit"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data"],
+        installTargets: ["codex", "cursor", "generic-mcp"],
+        source: "https://docs.cdp.coinbase.com/agent-kit/core-concepts/architecture-explained",
+        tokenUtility: "AXIS unlocks premium action templates and publisher verification.",
+        auditNotes: ["Schema-only by default", "No wallet writes in template mode", "Adapters are generated locally"],
+        operations: ["export action schema", "map tool adapter", "generate MCP wrapper", "document permissions"],
+        tests: ["generate schema", "validate adapter metadata"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Base", "Ethereum"], humanReadableRule: "Action provider templates are read-only until a wallet policy is explicitly attached." }
+    },
+    {
+        id: "agentic-wallet-mcp-setup",
+        title: "Agentic Wallet MCP Setup",
+        category: "Connector",
+        summary: "Install and pair Agentic Wallet MCP so local agents can use wallet, onramp, and x402 tools under Axis policy.",
+        useWhen: "Use when a user wants a guided local setup flow for wallet-enabled agents without manually editing every client config.",
+        chains: ["Base"],
+        protocols: ["Agentic Wallet MCP"],
+        risk: "medium",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "api-key"],
+        installTargets: ["codex", "claude", "openclaw", "generic-mcp"],
+        source: "https://docs.cdp.coinbase.com/agentic-wallet/mcp/welcome",
+        tokenUtility: "AXIS unlocks multi-client config export and team policy templates.",
+        auditNotes: ["Writes local config only", "Secrets are referenced by env name", "No private key export"],
+        operations: ["install MCP", "pair wallet", "configure spend limits", "export client config"],
+        tests: ["refuse plaintext secrets", "generate local config preview"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Base"], maxSpendUsd: null, secrets: ["CDP_API_KEY_NAME", "CDP_API_KEY_PRIVATE_KEY"], humanReadableRule: "Connector setup may reference secrets by environment name but never writes raw keys to disk." }
+    },
+    {
+        id: "bankr-launch-feed",
+        title: "Bankr Launch Feed",
+        category: "Base",
+        summary: "Monitor Bankr token launches on Base, score deployers, filter scam signals, and prepare guarded trade tickets.",
+        useWhen: "Use when a user wants an agent to watch new Bankr launches and surface only candidates that pass risk filters.",
+        chains: ["Base"],
+        protocols: ["Bankr"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/bankr",
+        tokenUtility: "AXIS unlocks launch alerts, verified deployer labels, and advanced filters.",
+        auditNotes: ["Read-first workflow", "Trade ticket only after filters", "No automatic buy"],
+        operations: ["fetch launches", "score deployer", "filter recency", "prepare buy ticket", "send alert"],
+        tests: ["flag unknown deployer", "block auto-buy path"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Base"], maxSpendUsd: 50, humanReadableRule: "Bankr launch monitoring is read-first and cannot buy without an explicit user approval ticket." }
+    },
+    {
+        id: "bankr-automation-trader",
+        title: "Bankr Automation Trader",
+        category: "Base Trading",
+        summary: "Prepare Bankr DCA, TWAP, limit, and stop workflows on Base with spend caps, time windows, and reviewable execution plans.",
+        useWhen: "Use when a user wants an agent to automate a Bankr strategy while retaining approval, budget, and stop conditions.",
+        chains: ["Base"],
+        protocols: ["Bankr"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "wallet-signature", "transaction-preview", "trading"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.bankr.bot/getting-started/supported-chains/",
+        tokenUtility: "AXIS staking is required for publisher verification on live trading skills.",
+        auditNotes: ["Max spend mandatory", "No silent recurring orders", "Strategy can be paused locally"],
+        operations: ["create DCA plan", "create TWAP plan", "prepare limit order", "prepare stop order", "pause schedule"],
+        tests: ["reject missing spend cap", "require approval before schedule activation"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 250, humanReadableRule: "Bankr automation can schedule trades only after the user approves amount, time window, and stop rules." }
+    },
+    {
+        id: "aerodrome-swap-lp",
+        title: "Aerodrome Swap and LP",
+        category: "Base DeFi",
+        summary: "Plan Aerodrome swaps, LP deposits, withdrawals, gauge stakes, and emissions claims with position and impermanent-loss checks.",
+        useWhen: "Use when a user wants an agent to manage Aerodrome liquidity on Base while seeing risk and reward assumptions first.",
+        chains: ["Base"],
+        protocols: ["Aerodrome"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview", "contract-call"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/aerodrome",
+        tokenUtility: "AXIS unlocks LP simulation and pool risk labels.",
+        auditNotes: ["Pool address verification", "LP risk summary", "Claims require confirmation"],
+        operations: ["swap", "deposit liquidity", "withdraw liquidity", "stake gauge", "claim rewards"],
+        tests: ["block unknown pool", "show LP exposure summary"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 500, humanReadableRule: "Aerodrome LP operations require pool verification and an exposure summary before signing." }
+    },
+    {
+        id: "avantis-perps-trader",
+        title: "Avantis Perps Trader",
+        category: "Perp DEX",
+        summary: "Prepare Avantis perpetual trades on Base with leverage caps, liquidation distance, TP/SL, and human approval gates.",
+        useWhen: "Use when a user wants a local agent to create or manage Avantis perps while preventing uncontrolled leverage.",
+        chains: ["Base"],
+        protocols: ["Avantis"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "wallet-signature", "transaction-preview", "trading"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/avantis",
+        tokenUtility: "AXIS unlocks advanced perps risk simulations and verified strategy templates.",
+        auditNotes: ["Leverage cap required", "TP/SL recommended", "Liquidation price shown"],
+        operations: ["open trade", "close trade", "set limit order", "set TP/SL", "update margin"],
+        tests: ["reject leverage above cap", "show liquidation distance"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 200, humanReadableRule: "Avantis perps actions require leverage, margin, liquidation price, and approval before execution." }
+    },
+    {
+        id: "moonwell-lending-ops",
+        title: "Moonwell Lending Ops",
+        category: "Base Lending",
+        summary: "Monitor and prepare Moonwell supply, borrow, repay, withdraw, and health checks with collateral risk warnings.",
+        useWhen: "Use when a user wants a local agent to manage Base lending positions without risking silent liquidation changes.",
+        chains: ["Base"],
+        protocols: ["Moonwell"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview", "contract-call"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/moonwell",
+        tokenUtility: "AXIS unlocks liquidation alerts and multi-position reports.",
+        auditNotes: ["Health factor shown", "Borrow actions require approval", "Collateral changes are highlighted"],
+        operations: ["supply", "withdraw", "borrow", "repay", "health check"],
+        tests: ["warn if borrow worsens health", "block withdrawal below threshold"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 400, humanReadableRule: "Moonwell actions must show health impact before user approval." }
+    },
+    {
+        id: "morpho-vault-router",
+        title: "Morpho Vault Router",
+        category: "Base Lending",
+        summary: "Compare Morpho vault APYs, liquidity, risk labels, deposits, withdrawals, borrows, and repayments under policy.",
+        useWhen: "Use when a user wants an agent to discover Base lending opportunities while avoiding opaque vault risk.",
+        chains: ["Base", "Ethereum"],
+        protocols: ["Morpho"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "wallet-signature", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/morpho",
+        tokenUtility: "AXIS unlocks vault scoring and strategy backtests.",
+        auditNotes: ["Vault address verification", "Liquidity warning", "APY source displayed"],
+        operations: ["query vaults", "compare APY", "deposit", "withdraw", "repay"],
+        tests: ["flag low liquidity vault", "require approval for deposit"],
+        policy: { ...approvalDefaults, allowedChains: ["Base", "Ethereum"], maxSpendUsd: 500, humanReadableRule: "Morpho vault actions require vault verification, liquidity check, and explicit approval." }
+    },
+    {
+        id: "uniswap-base-liquidity",
+        title: "Uniswap Base Liquidity",
+        category: "Base DeFi",
+        summary: "Plan Uniswap Base swaps and V2/V3/V4 liquidity positions with route, slippage, fee tier, and allowance previews.",
+        useWhen: "Use when a user asks an agent to plan swaps or LP actions on Base while reviewing every transaction.",
+        chains: ["Base"],
+        protocols: ["Uniswap"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "wallet-signature", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/uniswap",
+        tokenUtility: "AXIS unlocks route comparison and verified token labels.",
+        auditNotes: ["Slippage cap required", "Allowance warnings", "Fee tier displayed"],
+        operations: ["quote swap", "create LP", "increase LP", "decrease LP", "collect fees"],
+        tests: ["reject high slippage", "show allowance delta"],
+        policy: { ...approvalDefaults, allowedChains: ["Base"], maxSpendUsd: 500, humanReadableRule: "Uniswap Base actions require route, slippage, and allowance preview before signing." }
+    },
+    {
+        id: "virtuals-agent-commerce",
+        title: "Virtuals Agent Commerce",
+        category: "Agent Commerce",
+        summary: "Create and operate Virtuals ACP agents with identity, email, card, JWT session auth, and Base SIWE login under policy.",
+        useWhen: "Use when a user wants an agent to manage another commercial agent identity without leaking credentials.",
+        chains: ["Base"],
+        protocols: ["Virtuals ACP"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "wallet-read", "wallet-signature", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/virtuals",
+        tokenUtility: "AXIS unlocks verified commerce-agent templates.",
+        auditNotes: ["JWT stored by env reference", "SIWE requires approval", "Email actions logged locally"],
+        operations: ["create agent", "issue card", "open inbox", "compose reply", "refresh session"],
+        tests: ["refuse plaintext JWT", "require SIWE approval"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Base"], maxSpendUsd: null, secrets: ["VIRTUALS_API_KEY", "VIRTUALS_JWT"], humanReadableRule: "Virtuals commerce actions can reference secrets but must not write raw credentials to skill files." }
+    },
+    {
+        id: "hyperliquid-market-stream",
+        title: "Hyperliquid Market Stream",
+        category: "Perp DEX",
+        summary: "Subscribe to Hyperliquid order books, trades, funding, and user fills for read-only perps monitoring.",
+        useWhen: "Use when a user wants an agent to watch perps markets and alert on risk without placing orders.",
+        chains: ["Hyperliquid"],
+        protocols: ["Hyperliquid"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data", "notifications"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/api/websocket",
+        tokenUtility: "AXIS unlocks multi-market alert templates.",
+        auditNotes: ["Read-only websocket", "No API wallet required", "Alerts only"],
+        operations: ["stream order book", "stream trades", "watch funding", "alert fills"],
+        tests: ["connect websocket mock", "emit alert without order path"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Hyperliquid"], humanReadableRule: "Hyperliquid market stream is read-only and cannot place or cancel orders." }
+    },
+    {
+        id: "hyperliquid-order-executor",
+        title: "Hyperliquid Order Executor",
+        category: "Perp DEX",
+        summary: "Prepare Hyperliquid orders with API-wallet isolation, nonce checks, leverage caps, and user confirmation.",
+        useWhen: "Use when a user wants to place Hyperliquid orders through an agent but needs strict approval and isolated API wallet policy.",
+        chains: ["Hyperliquid"],
+        protocols: ["Hyperliquid"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "market-data", "trading", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/api",
+        tokenUtility: "AXIS staking is required for publishing executable perp skills.",
+        auditNotes: ["API wallet isolation", "Nonce check", "Position and leverage preview"],
+        operations: ["prepare order", "cancel order", "check positions", "enforce risk limit"],
+        tests: ["reject missing API wallet", "require approval for order"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Hyperliquid"], maxSpendUsd: 200, secrets: ["HYPERLIQUID_API_WALLET"], humanReadableRule: "Hyperliquid orders require API-wallet isolation, risk preview, and explicit approval." }
+    },
+    {
+        id: "gmx-v2-perps-agent",
+        title: "GMX V2 Perps Agent",
+        category: "Perp DEX",
+        summary: "Read GMX V2 markets, positions, and orders while preparing guarded Arbitrum perps workflows.",
+        useWhen: "Use when a user wants a local agent to manage GMX perps with conservative risk controls.",
+        chains: ["Arbitrum"],
+        protocols: ["GMX"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "market-data", "wallet-read", "wallet-signature", "transaction-preview", "trading"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.gmx.io/docs/api/overview/",
+        tokenUtility: "AXIS unlocks GMX risk templates and subaccount policy presets.",
+        auditNotes: ["Order workflow preview", "Subaccount policy supported", "Position impact shown"],
+        operations: ["read markets", "read positions", "prepare order", "cancel order", "monitor funding"],
+        tests: ["show position impact", "require order approval"],
+        policy: { ...approvalDefaults, allowedChains: ["Arbitrum"], maxSpendUsd: 250, humanReadableRule: "GMX perps orders require position impact, leverage, and approval before signing." }
+    },
+    {
+        id: "dydx-v4-trading-agent",
+        title: "dYdX v4 Trading Agent",
+        category: "Perp DEX",
+        summary: "Prepare dYdX Chain trading and analytics workflows with order, position, and websocket monitoring.",
+        useWhen: "Use when a user wants a Cosmos-based perps agent with explicit order approval and position monitoring.",
+        chains: ["dYdX Chain"],
+        protocols: ["dYdX"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "market-data", "trading", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.dydx.xyz",
+        tokenUtility: "AXIS unlocks strategy backtest reports and verified bot templates.",
+        auditNotes: ["API key scoped", "Order preview required", "Position alerts enabled"],
+        operations: ["read markets", "place order", "cancel order", "monitor positions"],
+        tests: ["reject unscoped key", "require approval for order"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["dYdX Chain"], maxSpendUsd: 200, secrets: ["DYDX_API_KEY"], humanReadableRule: "dYdX orders require a scoped key, visible order ticket, and user approval." }
+    },
+    {
+        id: "drift-perps-trader",
+        title: "Drift Perps Trader",
+        category: "Perp DEX",
+        summary: "Use Drift data and SDK patterns for Solana perps order planning, DLOB monitoring, and position risk alerts.",
+        useWhen: "Use when a user wants a Solana perps agent that can prepare orders but must never trade without approval.",
+        chains: ["Solana"],
+        protocols: ["Drift"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "market-data", "wallet-read", "wallet-signature", "trading"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.drift.trade/developers",
+        tokenUtility: "AXIS unlocks Solana risk templates and strategy review queues.",
+        auditNotes: ["DLOB monitoring", "Wallet signing requires approval", "Position risk shown"],
+        operations: ["place order", "cancel order", "monitor DLOB", "watch positions"],
+        tests: ["reject unsigned auto-trade", "show margin risk"],
+        policy: { ...approvalDefaults, allowedChains: ["Solana"], maxSpendUsd: 200, humanReadableRule: "Drift trading requires margin preview and explicit approval before wallet signing." }
+    },
+    {
+        id: "jupiter-perps-reader",
+        title: "Jupiter Perps Reader",
+        category: "Perp DEX",
+        summary: "Read Jupiter Perps and JLP data for pool exposure, market structure, and position research without trading.",
+        useWhen: "Use when a user wants Solana perps research or JLP monitoring before enabling executable actions.",
+        chains: ["Solana"],
+        protocols: ["Jupiter Perps"],
+        risk: "high",
+        executionMode: "read-only",
+        permissions: ["network", "market-data", "wallet-read"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://developers.jup.ag/docs/perps",
+        tokenUtility: "AXIS unlocks JLP reports and cross-market dashboards.",
+        auditNotes: ["Read-only perps data", "No wallet writes", "Execution skill separated"],
+        operations: ["read pool data", "monitor JLP", "track markets", "export report"],
+        tests: ["no transaction path", "generate market report"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Solana"], humanReadableRule: "Jupiter Perps reader is research-only and cannot place orders." }
+    },
+    {
+        id: "aevo-derivatives-mcp",
+        title: "Aevo Derivatives MCP",
+        category: "Perp DEX",
+        summary: "Expose Aevo derivatives, options, and structured-product data through an MCP-style local skill with guarded order planning.",
+        useWhen: "Use when a user wants an agent to research Aevo derivatives or prepare orders after policy review.",
+        chains: ["Aevo L2"],
+        protocols: ["Aevo"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "market-data", "trading", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw", "generic-mcp"],
+        source: "https://docs.aevo.xyz/",
+        tokenUtility: "AXIS unlocks derivatives strategy templates and audits.",
+        auditNotes: ["API key scoped", "Options risk disclosed", "Order ticket required"],
+        operations: ["read markets", "read options", "prepare order", "monitor positions"],
+        tests: ["show options risk", "require order approval"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Aevo L2"], maxSpendUsd: 200, secrets: ["AEVO_API_KEY"], humanReadableRule: "Aevo derivatives orders require a scoped key, visible risk ticket, and approval." }
+    },
+    {
+        id: "wallet-allowance-revoker",
+        title: "Wallet Allowance Revoker",
+        category: "Wallet Security",
+        summary: "Find risky token approvals and prepare revocation transactions with spender labels and contract verification checks.",
+        useWhen: "Use when a user wants an agent to reduce wallet approval risk across EVM chains.",
+        chains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"],
+        protocols: ["ERC20", "Blockscout", "Etherscan"],
+        risk: "high",
+        executionMode: "approval-required",
+        permissions: ["network", "wallet-read", "wallet-signature", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.uniswap.org/",
+        tokenUtility: "AXIS unlocks batch simulation and verified spender labels.",
+        auditNotes: ["Approval required per revocation", "Unlimited approvals flagged", "Contract labels shown"],
+        operations: ["scan allowances", "label spender", "prepare revoke", "batch report"],
+        tests: ["detect unlimited allowance", "require revoke approval"],
+        policy: { ...approvalDefaults, allowedChains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"], maxSpendUsd: 20, humanReadableRule: "Allowance revocations require spender labels and explicit approval before signing." }
+    },
+    {
+        id: "token-risk-screener",
+        title: "Token Risk Screener",
+        category: "Security",
+        summary: "Score tokens for honeypot patterns, liquidity, ownership, tax behavior, contract verification, and social risk.",
+        useWhen: "Use before an agent proposes a trade, launch participation, or LP position involving an unknown token.",
+        chains: ["Ethereum", "Base", "Arbitrum", "Solana"],
+        protocols: ["DEX Screener", "Blockscout", "Etherscan"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.uniswap.org/",
+        tokenUtility: "AXIS unlocks deeper token simulations and label feeds.",
+        auditNotes: ["Read-only analysis", "Source links required", "No buy recommendation without disclaimer"],
+        operations: ["score token", "check liquidity", "verify contract", "detect honeypot signals"],
+        tests: ["score unknown token", "return source links"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Ethereum", "Base", "Arbitrum", "Solana"], humanReadableRule: "Token risk screening is read-only and must show evidence links." }
+    },
+    {
+        id: "mev-slippage-simulator",
+        title: "MEV Slippage Simulator",
+        category: "Trading Safety",
+        summary: "Estimate slippage, route fragility, sandwich exposure, and fail conditions before an agent submits a swap.",
+        useWhen: "Use when an agent prepares swaps or LP changes and the user wants risk estimates before approval.",
+        chains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"],
+        protocols: ["Uniswap", "1inch"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data", "transaction-preview"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://business.1inch.com/portal/documentation/apis/swap/swap",
+        tokenUtility: "AXIS unlocks higher-frequency route simulation.",
+        auditNotes: ["Read-only route simulation", "Shows failure assumptions", "No signing path"],
+        operations: ["simulate slippage", "compare routes", "estimate price impact", "flag MEV risk"],
+        tests: ["reject route without quote", "surface price impact"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"], humanReadableRule: "MEV simulation is read-only and must run before high-risk swap approvals." }
+    },
+    {
+        id: "agent-permission-firewall",
+        title: "Agent Permission Firewall",
+        category: "Security",
+        summary: "Define local policy gates for tool calls, wallet writes, network access, secrets, paid APIs, and filesystem actions.",
+        useWhen: "Use as the default guard layer before installing any third-party agent skill.",
+        chains: ["Local"],
+        protocols: ["Axis"],
+        risk: "low",
+        executionMode: "read-only",
+        permissions: ["filesystem-read"],
+        installTargets: ["codex", "claude", "openclaw", "cursor", "generic-mcp"],
+        source: "https://modelcontextprotocol.io/specification/2025-06-18/server/tools",
+        tokenUtility: "AXIS unlocks shared team policies and reviewer attestations.",
+        auditNotes: ["Local policy only", "No wallet access", "Used by scanner and install flow"],
+        operations: ["read policy", "score permission", "block tool call", "write audit log"],
+        tests: ["block missing approval", "score critical permission"],
+        policy: { ...readOnlyDefaults, networkAccess: false, allowedChains: ["Local"], humanReadableRule: "The firewall reads policies and blocks unsafe actions before execution." }
+    },
+    {
+        id: "api-key-vault-setup",
+        title: "API Key Vault Setup",
+        category: "Security",
+        summary: "Create env-based secret references and client config templates without storing raw API keys inside skill packages.",
+        useWhen: "Use when a user installs skills that need API keys but wants local-only secret handling.",
+        chains: ["Local"],
+        protocols: ["Axis"],
+        risk: "medium",
+        executionMode: "approval-required",
+        permissions: ["filesystem-read", "filesystem-write", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw", "cursor"],
+        source: "https://modelcontextprotocol.io/specification/2025-06-18/server/tools",
+        tokenUtility: "AXIS unlocks team key templates and rotation reminders.",
+        auditNotes: ["No raw key storage", "Env names only", "Config diff before write"],
+        operations: ["create env template", "write client config", "validate secret references", "generate rotation checklist"],
+        tests: ["reject raw API key", "write env.example only"],
+        policy: { ...approvalDefaults, networkAccess: false, walletWrite: false, allowedChains: ["Local"], maxSpendUsd: null, secrets: ["API_KEY_NAME"], humanReadableRule: "Vault setup writes only secret references and never raw API keys." }
+    },
+    {
+        id: "polymarket-market-researcher",
+        title: "Polymarket Market Researcher",
+        category: "Prediction Markets",
+        summary: "Analyze Polymarket events, liquidity, order books, news context, and probability drift without placing trades.",
+        useWhen: "Use when an agent needs prediction-market intelligence before a user decides whether to trade.",
+        chains: ["Polygon"],
+        protocols: ["Polymarket CLOB"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data"],
+        installTargets: ["codex", "claude", "openclaw", "cursor"],
+        source: "https://docs.polymarket.com/developers/CLOB/trades/trades-data-api",
+        tokenUtility: "AXIS unlocks premium market monitoring and alert packs.",
+        auditNotes: ["Read-only CLOB data", "Source attribution required", "No wallet access"],
+        operations: ["search markets", "read order book", "track odds drift", "summarize evidence"],
+        tests: ["return cited market report", "confirm no order path"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Polygon"], humanReadableRule: "Polymarket research reads public market data and cannot place orders." }
+    },
+    {
+        id: "polymarket-trade-executor",
+        title: "Polymarket Trade Executor",
+        category: "Prediction Markets",
+        summary: "Create guarded Polymarket order tickets with max size, slippage, market verification, and user confirmation gates.",
+        useWhen: "Use when a user explicitly asks an agent to prepare a Polymarket order under local policy controls.",
+        chains: ["Polygon"],
+        protocols: ["Polymarket CLOB"],
+        risk: "critical",
+        executionMode: "approval-required",
+        permissions: ["network", "api-key", "market-data", "wallet-signature", "trading", "secrets-read"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.polymarket.com/developers/CLOB/trades/trades-data-api",
+        tokenUtility: "AXIS publisher stake is required for executable prediction-market skills.",
+        auditNotes: ["Human approval mandatory", "Market ID verification", "Max order size enforced"],
+        operations: ["verify market", "prepare order", "estimate slippage", "submit after approval"],
+        tests: ["reject missing market ID", "require approval before submit"],
+        policy: { ...approvalDefaults, walletWrite: false, allowedChains: ["Polygon"], maxSpendUsd: 100, secrets: ["POLYMARKET_API_KEY"], humanReadableRule: "Polymarket orders require market verification, size cap, and explicit approval." }
+    },
+    {
+        id: "github-skill-auditor",
+        title: "GitHub Skill Auditor",
+        category: "Developer Ops",
+        summary: "Review skill repos for unsafe scripts, hidden instructions, broad permissions, network calls, and missing tests.",
+        useWhen: "Use when a publisher submits a new Axis skill or a user wants to inspect a GitHub skill before install.",
+        chains: ["Local"],
+        protocols: ["GitHub"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "filesystem-read"],
+        installTargets: ["codex", "claude", "cursor"],
+        source: "https://openagentskills.dev/docs/specification",
+        tokenUtility: "AXIS funds audit bounties and reviewer rewards.",
+        auditNotes: ["Read-only repo scan", "No secrets access", "Findings include file paths"],
+        operations: ["scan SKILL.md", "review scripts", "score permissions", "generate audit report"],
+        tests: ["detect hidden instruction", "flag missing policy"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Local"], humanReadableRule: "Skill auditing reads repository files and produces findings without executing scripts." }
+    },
+    {
+        id: "portfolio-tax-exporter",
+        title: "Portfolio Tax Exporter",
+        category: "Wallet Ops",
+        summary: "Read wallet transactions and prepare CSV exports for portfolio accounting without making transactions.",
+        useWhen: "Use when a user wants an agent to assemble wallet activity, cost basis notes, and accountant-ready exports.",
+        chains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon", "Solana"],
+        protocols: ["RPC", "Block Explorers"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "wallet-read", "filesystem-write"],
+        installTargets: ["codex", "claude", "cursor"],
+        source: "https://docs.uniswap.org/",
+        tokenUtility: "AXIS unlocks multi-wallet exports and label enrichment.",
+        auditNotes: ["Read-only wallet data", "CSV generated locally", "No signing path"],
+        operations: ["read transactions", "label transfers", "export CSV", "summarize gaps"],
+        tests: ["generate CSV locally", "confirm no signing permission"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon", "Solana"], humanReadableRule: "Portfolio export reads wallet history and writes local reports only." }
+    },
+    {
+        id: "defi-yield-risk-monitor",
+        title: "DeFi Yield Risk Monitor",
+        category: "DeFi Risk",
+        summary: "Monitor lending, LP, vault, and farming positions for APY changes, TVL drops, liquidation risk, and reward anomalies.",
+        useWhen: "Use when a user wants an agent to watch DeFi positions and alert before risk becomes urgent.",
+        chains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"],
+        protocols: ["Aave", "Morpho", "Moonwell", "Aerodrome", "Uniswap"],
+        risk: "medium",
+        executionMode: "read-only",
+        permissions: ["network", "market-data", "wallet-read", "notifications"],
+        installTargets: ["codex", "claude", "openclaw"],
+        source: "https://docs.base.org/ai-agents/plugins/native/moonwell",
+        tokenUtility: "AXIS unlocks multi-chain monitoring and premium alert routes.",
+        auditNotes: ["Read-only monitoring", "Threshold alerts", "No position changes"],
+        operations: ["watch APY", "watch TVL", "check liquidation risk", "send alert"],
+        tests: ["emit threshold alert", "confirm no transaction path"],
+        policy: { ...readOnlyDefaults, allowedChains: ["Ethereum", "Base", "Arbitrum", "Optimism", "Polygon"], humanReadableRule: "Yield monitoring is read-only and only alerts on configured risk thresholds." }
+    }
+].map(assertSkillDefinition);
+export function getSkillById(id) {
+    return skills.find((skill) => skill.id === id);
+}
+export function getSkillsByChain(chain) {
+    const normalized = chain.toLowerCase();
+    return skills.filter((skill) => skill.chains.some((item) => item.toLowerCase() === normalized));
+}
+export function getRegistryStats() {
+    return {
+        totalSkills: skills.length,
+        baseSkills: getSkillsByChain("Base").length,
+        criticalSkills: skills.filter((skill) => skill.risk === "critical").length,
+        approvalRequired: skills.filter((skill) => skill.executionMode === "approval-required").length,
+        readOnly: skills.filter((skill) => skill.executionMode === "read-only").length,
+        chains: Array.from(new Set(skills.flatMap((skill) => skill.chains))).sort()
+    };
+}
+export function validateRegistry() {
+    const ids = new Set();
+    const findings = [];
+    for (const skill of skills) {
+        if (ids.has(skill.id)) {
+            findings.push(`Duplicate skill id: ${skill.id}`);
+        }
+        ids.add(skill.id);
+        findings.push(...validateSafetyRules(skill).map((finding) => `${skill.id}: ${finding}`));
+    }
+    return {
+        ok: findings.length === 0,
+        findings,
+        stats: getRegistryStats()
+    };
+}
+export function toSkillMarkdown(skill) {
+    return `---
+name: ${skill.id}
+description: ${skill.summary}
+license: Axis Research License
+metadata:
+  version: "0.1.0"
+  author: Axis
+  category: ${skill.category}
+  risk: ${skill.risk}
+  execution_mode: ${skill.executionMode}
+  chains:
+${skill.chains.map((chain) => `    - ${chain}`).join("\n")}
+  protocols:
+${skill.protocols.map((protocol) => `    - ${protocol}`).join("\n")}
+  permissions:
+${skill.permissions.map((permission) => `    - ${permission}`).join("\n")}
+---
+
+# ${skill.title}
+
+${skill.summary}
+
+## Use When
+
+${skill.useWhen}
+
+## Operations
+
+${skill.operations.map((operation) => `- ${operation}`).join("\n")}
+
+## Safety Gates
+
+${skill.auditNotes.map((note) => `- ${note}`).join("\n")}
+
+## Policy
+
+- Default mode: ${skill.policy.defaultMode}
+- Requires approval: ${skill.policy.requiresApproval ? "yes" : "no"}
+- Wallet write: ${skill.policy.walletWrite ? "yes" : "no"}
+- Max spend USD: ${skill.policy.maxSpendUsd ?? "not applicable"}
+- Allowed chains: ${skill.policy.allowedChains.join(", ")}
+- Rule: ${skill.policy.humanReadableRule}
+
+## Tests
+
+${skill.tests.map((test) => `- ${test}`).join("\n")}
+
+## Source
+
+${skill.source}
+`;
+}
+export function toPolicyJson(skill) {
+    return JSON.stringify({
+        id: skill.id,
+        title: skill.title,
+        risk: skill.risk,
+        executionMode: skill.executionMode,
+        permissions: skill.permissions,
+        policy: skill.policy,
+        tests: skill.tests
+    }, null, 2);
+}
+export function summarizeSkill(skill) {
+    return {
+        id: skill.id,
+        title: skill.title,
+        category: skill.category,
+        summary: skill.summary,
+        useWhen: skill.useWhen,
+        chains: skill.chains,
+        protocols: skill.protocols,
+        risk: skill.risk,
+        executionMode: skill.executionMode,
+        permissions: skill.permissions,
+        tokenUtility: skill.tokenUtility,
+        auditNotes: skill.auditNotes,
+        operations: skill.operations,
+        installCommand: `npx @axisagent/cli install ${skill.id}`,
+        source: skill.source
+    };
+}