meme-trench-scanner

SUSPICIOUS. The skill’s crypto-trading behavior matches its stated purpose, and the installer/update paths appear to be same-org OKX sources rather than unrelated third parties. However, it still carries substantial security risk because it installs remote tooling, adds other skills transitively, and enables bounded autonomous on-chain trading with real financial consequences.

No clear evidence of malware or intentional supply-chain sabotage appears in this fragment. The code is a high-impact automated Solana trading bot that can sign, broadcast, and automatically sell blockchain transactions through the external onchainos CLI. Review the onchainos binary and configuration separately, restrict and authenticate dashboard access, replace the shell-based port cleanup with a non-shell implementation, and use paper-trade mode until transaction routing and wallet behavior are independently verified.