pancakeswap-v2-plugin
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the onchainos CLI installer and the plugin's core binary from the author's official GitHub repositories.- [COMMAND_EXECUTION]: Shell scripts and binaries are executed as part of the setup and update process. The skill ensures safety by verifying the SHA256 checksum of the downloaded installer and binary before execution.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from blockchain RPC providers, such as token names and pool reserves. Ingestion points: Data enters through RPC call results handled in
src/rpc.rs. Boundary markers: The skill includes a 'Data Trust Boundary' notice inSKILL.mdto warn the agent about untrusted external content. Capability inventory: The skill performs on-chain write operations usingonchainos wallet contract-callinsrc/onchainos.rs. Sanitization: The skill validates token addresses insrc/config.rs, uses structured JSON for output formatting, and requires explicit user confirmation for all write transactions.
Audit Metadata