oc-pump-fun

SUSPICIOUS. The skill’s purpose matches its trading capability, but it enables high-impact financial actions, depends on a registry-installed skill plus external non-authoritative documentation, and reportedly requires a Solana private key. This is not confirmed malware, but the trust chain and wallet-key exposure make it high risk.