Add yield-strategy-advisor (Barker Stablecoin Skills, 0.1.0)

[zuoyeweb3]

Plugin

Name: yield-strategy-advisor
Description: Stablecoin yield strategy recommendations by risk tolerance, capital size, and chain preference. Suggests diversified allocations across 500+ DeFi protocols and 20+ CEX.

Metadata

Field	Value
Submission mode	A (Direct, per FOR-DEVELOPERS.md §8)
Version	0.1.0 (first submission)
Category	analytics
License	MIT
Author org	YBSbarker — controlled by the Barker team
Source repo	https://github.com/YBSbarker/barker-stablecoin-skills @ tag v2.1.0
Contact	partner@barker.money
API surface	api.barker.money public endpoints (/defi/*, /market/*); no authentication, 30 req/min/IP

Author / submitter disclosure

• Brand: Barker — The Stablecoin Yield Map (barker.money)
• GitHub org: YBSbarker (controlled by the Barker team)
• Submitting committers: zuoyeweb3 (founder), royrzguo (engineering) — both authorized Barker team members

Submission strategy: 7 independent plugins (Plan A)

This is one of seven sibling submissions from the Barker Stablecoin Skills suite. Per SOP §1 "one plugin per submission", we are opening seven independent PRs:

• stablecoin-yield-radar — APY rankings across DeFi and CEX
• stablecoin-market-brief — market cap, distribution, APY-vs-Treasury
• stablecoin-risk-check — depeg history, reserves, audit status (curated)
• yield-strategy-advisor — allocation by risk / capital size
• stablecoin-depeg-monitor — peg stability + historical depeg DB
• stablecoin-yield-vs-tradfi — DeFi yields vs bank / Treasury / MMF
• stablecoin-chain-explorer — TVL & yields by blockchain

If maintainers prefer a single multi-component plugin instead, please let us know — we will close the other six and open one consolidated PR.

Review history

Previously reviewed in private by Sam See on 2026-05-11 against our source-repo commit 1e1301b. Stage 1 Reject with 7 blockers + 4 concerns; Stage 2 Skill Guard scan: CLEAN.

This submission fully addresses all 7 blockers and 4 concerns from that review:

• ✅ skills/<plugin-name>/ layout (SOP §1.1)
• ✅ plugin.yaml (schema_version:1, version aligned, description ≤200 ASCII, category: analytics, api_calls: [api.barker.money])
• ✅ .claude-plugin/plugin.json mirroring plugin.yaml
• ✅ SUMMARY.md with required ## Overview / ## Prerequisites / ## Quick Start sections
• ✅ SKILL.md frontmatter has version + ## Overview H2 + ## Security: External Data Boundary section
• ✅ Co-located LICENSE
• ✅ Author / submitter relationship disclosed (above)

CEX scope tightening (transparency note)

The original 2026-05-05 version (commit 1e1301b) documented CEX per-venue endpoints (/cex/venue-assets, campaigns[], borrow/LTV) in the public API surface. On re-review (2026-05-11), we judged that scope materially overlapped with our paid Enterprise tier. The current submission's public API surface is strictly /defi/* + /market/*; CEX per-venue access is now Enterprise-only via app.barker.money/enterprise. Backend route changes ship in companion deploys.

Pre-submission checklist

• plugin.yaml, .claude-plugin/plugin.json, SKILL.md, SUMMARY.md, LICENSE all present
• name lowercase + hyphens only, 2-40 chars
• version matches across plugin.yaml / plugin.json / SKILL.md frontmatter (0.1.0)
• author.github matches submitter (YBSbarker)
• license uses SPDX MIT
• category from allowlist (analytics)
• api_calls lists all external API domains ([api.barker.money])
• SKILL.md has YAML frontmatter with name, description, version
• SKILL.md includes Overview + routing keywords + endpoint usage + Security section
• No hardcoded secrets, no pre-compiled binaries
• Submission only modifies files inside skills/yield-strategy-advisor/

🤖 Generated with Claude Code

[ajarcoronet5415-commits]

Hi! Professional auditor, 32+ findings. Portfolio: https://ajarcoronet5415-commits.github.io/security-audit-portfolio/ - AGX