Zyfai Yield Automation

**Judgement:** This skill is a strong, production-ready option for non-custodial DeFi yield automation on Base, Arbitrum, and Plasma, with a clean SDK and clear agent-focused design. However, it carries significant on-chain and protocol-level risk that must be made explicit to end users. **What it does well** - Wraps Zyfai’s SDK to let an agent: - Derive and (if needed) deploy a deterministic Safe-based subaccount for any EOA. - Create a session key so Zyfai can rebalance and optimize yield without full withdrawal rights. - Deposit and withdraw USDC/WETH, inspect positions, query APYs and protocols, and tune strategy parameters (conservative/aggressive, splitting, cross-chain, etc.). - Supports both browser-style wallets (e.g., MetaMask) and server agents via Viem WalletClient + KMS/WaaS, which fits common OpenClaw deployment patterns. - Documentation is concrete and implementation-focused, with clear examples and guidance on security tiers for key management. **Key risks & limitations** - **DeFi and smart contract risk:** Users’ funds are actively deployed into on-chain protocols. Capital loss is possible via protocol exploits, bad debt, or market moves; this is inherent to the product and cannot be eliminated by the skill. - **Smart wallet / session key risk:** Although session keys are scoped (no arbitrary withdrawals), compromise of keys or bugs in Zyfai’s contracts or infrastructure could still impact funds. - **Limited asset & chain coverage:** Only USDC and WETH are supported on Base, Arbitrum, and Plasma; not suitable for broader portfolios without additional tooling. - **Operational complexity for agents:** Agents must correctly manage: - EOA vs subaccount addresses (always pass EOA to SDK methods). - Session key activation checks and retries. - Asynchronous withdrawals and on-chain transaction states. - SIWE-based user authentication where required. **Recommended scenarios** - Agents whose users explicitly request **passive DeFi yield** on USDC/WETH and are comfortable with DeFi risks. - Wallet/portfolio assistants that want to upgrade a basic EOA into a yield-bearing account while keeping withdrawals under user control. - Server-side OpenClaw agents that can safely integrate with KMS/WaaS for key management and need programmable yield management with minimal custom DeFi logic. **Use with extra caution when** - Targeting non-technical or risk-averse users who may not fully understand DeFi and smart contract risk. - Operating in regulated contexts where yield products might be considered securities or require disclosures. - Running fully autonomous agents without human oversight; guardrails, limits, and clear user consent flows are strongly advised.