The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the onchainos CLI installer, a launcher script, and the pump-fun-plugin binary from OKX GitHub repositories during its setup phase. The setup process includes a step to verify the SHA256 checksum of the installer script.
[REMOTE_CODE_EXECUTION]: The skill executes the downloaded onchainos installation script and the plugin binary. These resources are retrieved from official repositories associated with the vendor OKX.
[COMMAND_EXECUTION]: The plugin implementation performs system calls to the onchainos CLI tool. These commands are used to manage Solana wallet addresses, retrieve token balances, and broadcast swap transactions to the blockchain.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Solana RPC endpoints, including token metadata and bonding curve status. This data represents untrusted external content that could be manipulated to influence the agent's behavior.
Ingestion points: Commands such as get-token-info and get-price fetch bonding curve and token data from the Solana blockchain via the pumpfun Rust crate.
Boundary markers: The skill instructions include a explicit 'Data Trust Boundary' warning that directs the agent to treat blockchain data as untrusted and to filter specific fields before interpretation.
Capability inventory: The skill possesses the capability to broadcast financial transactions using the onchainos swap execute command.
Sanitization: The skill relies on the agent to follow instructions for field filtering, while the underlying Rust implementation performs structured parsing of RPC responses into defined data objects.

pump-fun-plugin