pancakeswap-v2-plugin

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the onchainos CLI installer and the plugin's core binary from the author's official GitHub repositories.- [COMMAND_EXECUTION]: Shell scripts and binaries are executed as part of the setup and update process. The skill ensures safety by verifying the SHA256 checksum of the downloaded installer and binary before execution.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from blockchain RPC providers, such as token names and pool reserves. Ingestion points: Data enters through RPC call results handled in src/rpc.rs. Boundary markers: The skill includes a 'Data Trust Boundary' notice in SKILL.md to warn the agent about untrusted external content. Capability inventory: The skill performs on-chain write operations using onchainos wallet contract-call in src/onchainos.rs. Sanitization: The skill validates token addresses in src/config.rs, uses structured JSON for output formatting, and requires explicit user confirmation for all write transactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:50 PM