pump-fun-plugin

SUSPICIOUS: the skill is purpose-aligned and mostly uses same-org OKX infrastructure, so it is not clearly malicious. However, it performs cryptocurrency trades, auto-installs additional skills, and uses remote installers/binaries, making its security footprint high-risk and broader than a simple read-only token info tool.