harvest-rewards skillA
harvest-rewards is agent-read markdown (skill) from starchild-ai-agent/official-skills: Harvest pending CAKE and partner-token rewards from PancakeSwap farming positions. Use when user says "/harvest-rewards", "harvest all my pending CAKE rewards", "how much do I have to claim from my farms", "claim my Syrup Pool rewards", "pending farming rewards", "collect CAKE rewards", or asks what they can harvest..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# PancakeSwap Harvest Rewards
Check pending CAKE and partner-token rewards across all PancakeSwap farming positions and generate harvest instructions or deep links to claim them.
## Overview
This skill **does not execute transactions** — it checks pending rewards and produces deep links to the PancakeSwap UI. The user reviews and confirms in their own wallet.
## Security
::: danger MANDATORY SECURITY RULES
1. **Shell safety**: Always use single quotes when assigning user-provided values to shell variables (e.g., `KEYWORD='user input'`). Always quote variable expansions in commands (e.g., `"$TOKEN"`, `"$RPC"`).
2. **Input validation**: Before using any variable in a shell command, validate its format. Token addresses must match `^0x[0-9a-fA-F]{40}$`. Chain IDs and pool IDs must be numeric or hex-only (`^0x[0-9a-fA-F]+$`). RPC URLs must come from the Supported Chains table. Reject any value containing shell metacharacters (`"`, `` ` ``, `$`, `\`, `;`, `|`, `&`, newlines).
…Read the whole file at its exact version.
How to install
mdr add starchild-ai-agent/official-skills/harvest-rewards@v1.0.0mdr add starchild-ai-agent/official-skills/harvest-rewards@sha256:0c296b3e9d092543Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_2px3g3s6wlseq6ug)
1 badge views in 30 days
Versions
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16070 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
starchild-ai-agent/official-skills · 28 stars · license none · pushed 2026-09-18 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_2px3g3s6wlseq6ug GET https://markdownregistry.com/api/v1/resolve?ref=starchild-ai-agent/official-skills/harvest-rewards GET https://markdownregistry.com/api/v1/blob/0c296b3e9d092543d3f3ef773c7a21a36a4fe26bdf49055317d8e1980dd07c99
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.