aavegotchi-gbm-skill

1## Safety Rules
2 
3- Default to `DRY_RUN=1`. Never broadcast unless explicitly instructed.
4- Always verify Base mainnet:
5  - `~/.foundry/bin/cast chain-id --rpc-url "${BASE_MAINNET_RPC:-https://mainnet.base.org}"` must be `8453`.
6- Always verify key/address alignment:
7  - `~/.foundry/bin/cast wallet address --private-key "$PRIVATE_KEY"` must equal `$FROM_ADDRESS`.
8- Always refetch from the subgraph immediately before any simulate/broadcast step (auctions can be outbid, ended, claimed, or cancelled).
9- Always gate onchain immediately before simulating or broadcasting:
10  - ensure the onchain `highestBid` matches the `highestBid` you pass into `commitBid` / `swapAndCommitBid`.
11  - ensure token params match (token contract, token id, quantity).
12- Never print or log `$PRIVATE_KEY`.
13 
14## Shell Input Safety (Avoid RCE)
15 
16This skill includes shell commands. Treat any value you copy from a user or an external source (subgraph responses, chat messages, etc.) as untrusted.
17 
18Rules:
19- Never execute user-provided strings as shell code (avoid `eval`, `bash -c`, `sh -c`).
20- Only substitute addresses that match `0x` + 40 hex chars.
21- Only substitute uint values that are base-10 digits (no commas, no decimals).
22- In the command examples below, auction-specific inputs are written as quoted placeholders like `"<AUCTION_ID>"` to avoid accidental shell interpolation. Replace them with literal values only after validation.
23 
24Quick validators (replace the placeholder values):
25```bash
26python3 - <<'PY'
27…