pancakeswap-v2-plugin
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates a high security posture, utilizing verified downloads and maintaining a clear trust boundary for external data.
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata, an installation script, and a core binary from the author's (okx) official GitHub repositories. These downloads are performed over HTTPS and include SHA256 checksum verification for the installer script.
- [REMOTE_CODE_EXECUTION]: During setup, the skill downloads a shell script and a platform-specific binary to facilitate interaction with the PancakeSwap protocol. These components are sourced from trusted vendor infrastructure and are required for the skill's primary purpose.
- [COMMAND_EXECUTION]: The skill uses local shell commands for installation tasks (e.g., chmod, ln, mkdir) and executes the onchainos CLI to perform wallet and contract operations. All command arguments are properly handled to prevent injection risks.
- [DATA_TRUST_BOUNDARY]: The instructions include a specific security notice (M08) advising the agent to treat all data from external RPC sources as untrusted and to sanitize outputs before rendering them to the user.
Audit Metadata