dolomite-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs several downloads during initialization from a trusted organization (okx) via GitHub. These include version checks, installation scripts, and the core binary. All critical execution steps, such as running the installation script and deploying the binary, are preceded by SHA256 checksum verification against expected values provided by the publisher.
- [COMMAND_EXECUTION]: The skill interacts with the local environment by executing the 'onchainos' CLI tool. This is used for wallet address resolution and broadcasting Ethereum transactions to the Arbitrum network. This is the intended primary purpose of the skill.
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script and a binary from a trusted organization. These operations are performed with integrity checks (checksums) and follow best practices for secure CLI tool distribution.
- [PROMPT_INJECTION]: The skill contains internal instructions for the AI agent to follow a 'Live Trading Confirmation Protocol'. This protocol acts as a safety barrier, requiring typed user confirmation and preview modes before any on-chain write operations are performed, which mitigates the risk of accidental or unauthorized transactions.
Audit Metadata