puffer-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and platform-specific binaries from the vendor's official GitHub repositories (github.com/okx/onchainos-skills and github.com/okx/plugin-store). All downloaded assets are verified using SHA256 checksums prior to installation.
- [COMMAND_EXECUTION]: Utilizes the onchainos command-line tool to perform blockchain queries and execute wallet transactions. All state-changing operations (stake, withdraw) are gated by an explicit --confirm flag to ensure user oversight.
- [SAFE]: Implements industry best practices including pre-flight gas and balance checks, use of a secure Rust environment, and explicit documentation of data trust boundaries for information ingested from external APIs (DeFiLlama and Ethereum RPC). The skill processes untrusted external data by parsing it into strictly typed numeric values, providing a layer of sanitization against indirect injection.
Audit Metadata