pump-fun-plugin
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches update metadata, shell scripts, and platform-specific binaries from the vendor's official GitHub repositories during the initialization phase.
- [REMOTE_CODE_EXECUTION]: Executes an installation script for the onchainos CLI using a piped shell command (curl | sh) sourced from the vendor's repository.
- [COMMAND_EXECUTION]: Spawns the onchainos CLI to perform wallet address resolution, balance checks, and transaction execution on the Solana blockchain.
- [SAFE]: Implements a clear Data Trust Boundary policy instructing the agent to treat blockchain-sourced data as untrusted and requires explicit user confirmation via a --confirm flag for all financial operations.
Audit Metadata