Skill: zkoranges/philidor (version 0.1.1)

--- name: philidor description: > DeFi vault intelligence: risk scores, yield comparison, portfolio analysis, and oracle monitoring across Morpho, Yearn, Aave, Beefy, and Spark. Use when the user wants to find safe DeFi vaults, compare yields, check vault risk scores, analyze a wallet's DeFi positions, search for yield opportunities, monitor oracle freshness, or get DeFi market overview stats. Covers Ethereum, Base, Arbitrum, Polygon, Optimism, and Avalanche. version: 0.1.1 metadata: { 'openclaw': { 'emoji': '🏰', 'homepage': 'https://philidor.io', 'requires': { 'bins': ['philidor'] }, 'install': [ { 'kind': 'node', 'package': '@philidorlabs/cli', 'bins': ['philidor'], 'label': 'Install Philidor CLI', }, ], }, } --- # Philidor — DeFi Vault Intelligence Institutional-grade risk scores, yield comparison, portfolio analysis, and oracle monitoring for DeFi vaults across five major protocols and six chains. ## Quick Start ```bash # Platform overview — total TVL, vault counts, risk distribution philidor stats # Search vaults by name, symbol, or asset philidor search "USDC" # Analyze all DeFi positions for a wallet address philidor portfolio 0xYourWalletAddress ``` ## Core Concepts ### Risk Tiers Every vault receives a composite risk score from 0 to 10, grouped into three tiers: | Tier | Score Range | Meaning | | ----------- | ----------- | ---------------------------------------------------------------------------------------------- | | **Prime** | 8.0 - 10.0 | Institutional-grade. Battle-tested protocols, blue-chip assets, strong governance controls. | | **Core** | 5.0 - 7.9 | Solid fundamentals with some trade-offs in asset quality, audit coverage, or decentralisation. | | **Edge** | 0.0 - 4.9 | Higher risk. Newer protocols, exotic assets, weaker control structures, or recent incidents. | | **Unrated** | N/A | Insufficient data to score. Treated as high-risk by default. | Scores are derived from three weighted vectors: - **Asset Quality (40%)** — collateral quality, oracle reliability, liquidity depth, peg stability - **Platform & Strategy (40%)** — smart contract maturity, audit coverage, TVL track record, incident history - **Control & Governance (20%)** — timelock presence, multisig configuration, upgradeability, admin powers ### APR (Annual Percentage Rate) APR values are stored as **decimals**: `0.05` means **5%**. - **`apr_net`** — total APR including base yield plus any incentive rewards - **`base_apr`** — native protocol yield only (lending rate, share price accrual), before rewards - **Invariant**: `apr_net = base_apr + SUM(reward APRs)` Reward types include `token_incentive` (MORPHO, ARB, SPK), `points`, `trading_fee` (LP fees), and `strategy` (Yearn sub-strategies). ### Protocols | Protocol | Description | | ------------ | ------------------------------------------------------------------------------------ | | **Morpho** | Optimised lending with curated vaults (Ethereum, Base) | | **Yearn v3** | Automated yield strategies (Ethereum, Polygon, Arbitrum, Base, Optimism) | | **Aave v3** | Blue-chip lending/borrowing (Ethereum, Polygon, Arbitrum, Avalanche, Optimism, Base) | | **Beefy** | Multi-chain yield optimiser (12+ chains) | | **Spark** | MakerDAO lending markets (Ethereum) | ### Chains Ethereum, Base, Arbitrum, Polygon, Optimism, and Avalanche. ## Commands ### Discovery & Search ```bash # List vaults with filters philidor vaults philidor vaults --chain ethereum philidor vaults --protocol morpho philidor vaults --risk-tier prime philidor vaults --asset USDC philidor vaults --min-tvl 1000000 philidor vaults --stablecoin --audited philidor vaults --high-confidence # Only vaults with high data confidence philidor vaults --no-il # Exclude vaults with impermanent loss risk philidor vaults --sort apr_net:desc --limit 10 --page 2 # Search vaults by name, protocol, asset, or address philidor search "USDC" philidor search "Aave" philidor search "Gauntlet" philidor search "USDC" --limit 20 # Control result count (default: 10) # For filtered queries, use `vaults` with flags instead of search: philidor vaults --asset USDC --chain base --risk-tier prime philidor vaults --asset WETH --protocol morpho --sort apr_net:desc ``` ### Vault Detail ```bash # By vault ID philidor vault <vault-id> # By network slug + contract address philidor vault ethereum 0x1234... # Sub-resources (require network + address form) philidor vault ethereum 0x1234... --events # Event history (incidents, parameter changes) philidor vault ethereum 0x1234... --markets # Morpho market allocations philidor vault ethereum 0x1234... --strategies # Yearn strategies philidor vault ethereum 0x1234... --rewards # Reward breakdown (base + incentives) ``` ### Portfolio ```bash # All positions across all chains philidor portfolio 0xWalletAddress # Filter to a specific chain philidor portfolio 0xWalletAddress --chain base ``` Returns: vault details, chain, balance in USD, APR, risk score, risk tier for each position. Includes aggregates: total value, weighted risk, position count, risk distribution. ### Comparison & Risk ```bash # Side-by-side vault comparison (2-5 vault IDs) philidor compare <vault-id-1> <vault-id-2> <vault-id-3> # Detailed risk vector breakdown for a specific vault philidor risk breakdown <vault-id> philidor risk breakdown ethereum 0x1234... # Explain the risk scoring methodology — tiers, vectors, weights philidor risk explain # Vaults with recent critical security incidents philidor risk incidents ``` ### Reference Data ```bash # List all supported protocols with vault counts and TVL philidor protocols # Protocol detail — audit status, chain coverage, incident history philidor protocol <id> # List curators (Morpho vault managers) philidor curators philidor curators --sort tvl_total:desc --limit 10 --page 1 # Curator detail — managed vaults, TVL, performance philidor curator <id> # Platform overview — total TVL, vault counts, risk distribution philidor stats # Supported chains philidor chains # Supported assets philidor assets # Oracle feed freshness and deviation data philidor oracles freshness ``` ### Output Formats All commands support three output formats: ```bash philidor vaults --json # Structured JSON (best for agents and scripting) philidor vaults --table # Human-readable table (default in TTY) philidor vaults --csv # CSV for spreadsheets and data pipelines ``` When output is piped (non-TTY), JSON is the default. Use `--json` explicitly in agent workflows for consistency. Additional global flags: ```bash --api-url <url> # Override API base URL (default: https://api.philidor.io) # Also respects PHILIDOR_API_URL environment variable ``` ## Agent Workflows ### Workflow 1: Find the Best Vault for a User's Needs Step-by-step pattern for recommending a vault based on user criteria. ```bash # Step 1: Search for matching vaults philidor search "stablecoin vault on base" --json # Returns matched vaults with TVL, APR, risk tier # Step 2: Compare the top candidates side-by-side philidor compare <vault-id-1> <vault-id-2> <vault-id-3> --json # Compares TVL, APR (base + rewards), risk score, audited status, curator # Step 3: Deep-dive into the risk profile of the chosen vault philidor risk breakdown <chosen-vault-id> --json # Full risk vector breakdown: # - Asset risk (collateral quality, oracle reliability, liquidity depth) # - Platform risk (smart contract maturity, audit coverage, incident history) # - Control risk (governance, timelock, upgradeability, admin powers) # Step 4: Check recent events for any red flags philidor vault <network> <address> --events --json # Recent events: incidents, parameter changes, pauses # Decision: Recommend the vault with the best risk-adjusted yield. # Flag any Edge-tier vaults or recent incidents to the user. ``` ### Workflow 2: Compare Protocols for Yield Farming Step-by-step pattern for cross-protocol yield comparison. ```bash # Step 1: Get protocol overview philidor protocols --json # Lists all protocols with vault counts, TVL, risk distribution # Step 2: Get top vaults per protocol (can run in parallel) philidor vaults --protocol morpho --sort apr_net:desc --limit 5 --json philidor vaults --protocol aave-v3 --sort apr_net:desc --limit 5 --json philidor vaults --protocol yearn-v3 --sort apr_net:desc --limit 5 --json # Top 5 vaults per protocol ranked by yield # Step 3: Compare the best vaults across protocols philidor compare <best-morpho-id> <best-aave-id> <best-yearn-id> --json # Cross-protocol comparison for the same asset class # Step 4: Get protocol-level details philidor protocol morpho --json # Protocol detail: audit status, versions, incident history, chain coverage # Decision: Compare yield vs risk across protocols. # Note audited vs unaudited versions and flag incident history. ``` ### Workflow 3: Analyze Portfolio Risk Step-by-step pattern for assessing and improving a wallet's DeFi risk profile. ```bash # Step 1: Get all positions philidor portfolio 0xWalletAddress --json # All positions: vault, chain, balance_usd, APR, risk_score, risk_tier # Aggregates: total value, weighted risk, position count, risk distribution # Step 2: Identify risky positions # Filter results for positions with risk_tier = "Edge" or risk_score < 5 # Step 3: Investigate each risky position philidor risk breakdown <risky-vault-id> --json # What is driving the low score? Asset? Platform? Control? # Step 4: Find safer alternatives for the same asset philidor search "USDC prime audited" --json # Or use: philidor vaults --asset USDC --risk-tier prime --audited --json # Find Prime-tier alternatives for the same asset # Decision: Present a portfolio risk summary to the user. # Highlight Edge-tier positions and suggest Prime alternatives # with comparable or better yield. ``` ### Workflow 4: Monitor Vault Safety Step-by-step pattern for ongoing safety monitoring. ```bash # Step 1: Check for active incidents across all protocols philidor risk incidents --json # Vaults with recent critical incidents # Step 2: Check oracle health philidor oracles freshness --json # Oracle feed freshness: stale feeds, deviation alerts # Step 3: Check event history for a specific vault philidor vault <network> <address> --events --json # Event timeline: incidents, parameter changes, pauses # Decision: Flag vaults with active incidents or stale oracle feeds. # Recommend pausing deposits until issues are resolved. ``` ## Interpreting Output Key fields and their formats: | Field | Format | Example | Notes | | ---------------- | --------------- | ----------------------------------------- | ---------------------------------------------------------------- | | `apr_net` | Decimal | `0.0523` | Total APR = 5.23%. Includes base yield + rewards. | | `base_apr` | Decimal | `0.0340` | Base yield only = 3.40%. Native protocol rate before incentives. | | `tvl_usd` | Number (string) | `"12500000.50"` | Total value locked in USD. Returned as string for precision. | | `total_score` | Number or null | `8.3` | Composite risk score 0-10. Null means unrated. | | `risk_tier` | String | `"Prime"` | Derived from total_score: Prime (>=8), Core (5-7.9), Edge (<5). | | `risk_vectors` | Object | `{"asset":{"score":8.5},...}` | Breakdown: asset (40%), platform (40%), control (20%). | | `is_audited` | Boolean | `true` | Whether the protocol version has been audited. | | `last_synced_at` | ISO 8601 | `"2026-02-26T12:00:00Z"` | When the vault data was last refreshed from on-chain. | | `rewards` | Array | `[{"token_symbol":"MORPHO","apr":0.018}]` | Individual reward token APRs. Sum + base_apr = apr_net. | ## Error Handling | Error | Cause | Fix | | ----------------------- | ----------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | | `Connection refused` | API server unreachable | Check network connectivity. Verify `--api-url` if using a custom endpoint. The default is `https://api.philidor.io`. | | `404 Not Found` | Invalid vault ID, protocol ID, or address | Verify the vault ID exists with `philidor vaults`. Check that the network slug is correct (e.g., `ethereum`, not `eth`). | | `429 Too Many Requests` | Rate limit exceeded | Wait and retry. The public API allows generous read limits but has per-IP throttling. Space out bulk queries. | | `Request timeout` | API response took too long | Retry the request. For large result sets, use `--limit` to reduce page size. | | `Invalid chain` | Unsupported chain slug | Run `philidor chains` to see valid chain slugs. | ## Best Practices 1. **Always use `--json` in agent workflows.** JSON output is structured, stable, and machine-parseable. Table output is for human consumption only and may change format between versions. 2. **Check risk before recommending any vault.** Never recommend a vault based on APR alone. Always run `philidor risk breakdown <id>` and check for Edge-tier scores or recent incidents via `philidor risk incidents`. 3. **Note data freshness timestamps.** The `last_synced_at` field indicates when vault data was last refreshed from on-chain sources. Data older than a few hours may not reflect current APR or TVL. Flag stale data to users. 4. **Cross-reference incidents and oracle health.** Before recommending a vault, check `philidor risk incidents` for active security events and `philidor oracles freshness` for stale price feeds. These can materially affect vault safety. 5. **Use portfolio context for personalised advice.** When a user has a wallet address, start with `philidor portfolio <address>` to understand their existing positions before suggesting new vaults. This enables risk-aware recommendations that consider concentration and diversification. ## Resources - **Website**: [https://philidor.io](https://philidor.io) - **API Documentation**: [https://api.philidor.io/v1/docs](https://api.philidor.io/v1/docs) - **Risk Methodology**: `philidor risk explain` or [https://philidor.io/risk](https://philidor.io/risk)

path: package.json
content: {
  "name": "@philidorlabs/openclaw-skill",
  "version": "0.1.1",
  "description": "OpenClaw skill for Philidor — DeFi vault intelligence for AI agents",
  "type": "module",
  "files": [
    "SKILL.md"
  ],
  "license": "MIT",
  "repository": {
    "type": "git",
    "url": "https://github.com/philidor-io/philidor",
    "directory": "packages/openclaw-skill"
  },
  "keywords": [
    "openclaw",
    "skill",
    "defi",
    "vault",
    "risk",
    "yield",
    "ai",
    "agent",
    "philidor",
    "morpho",
    "aave",
    "yearn",
    "beefy"
  ]
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)