raydium-plugin

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's setup routine downloads the onchainos CLI installer and the plugin's binary from the vendor's official GitHub repositories. These downloads are part of the intended installation process for the toolset.
  • [REMOTE_CODE_EXECUTION]: The skill executes a downloaded shell script to install the onchainos CLI. This process is secured by a SHA256 checksum verification step to confirm the script's authenticity before it is executed.
  • [COMMAND_EXECUTION]: The skill uses the onchainos CLI to manage Solana wallet addresses and broadcast signed transactions. These commands are necessary for the skill's primary function of interacting with the blockchain.
  • [DATA_EXFILTRATION]: The skill retrieves the user's Solana wallet address to perform balance checks and transaction preparation. All network requests are directed to official Raydium and Solana RPC endpoints for legitimate DeFi operations.
  • [PROMPT_INJECTION]: The skill processes external data from the Raydium API (ingestion points). It includes a 'Data Trust Boundary' section that warns the agent to treat this output as untrusted (boundary markers) and provides rendering instructions to filter raw API response objects (sanitization). The skill's capability inventory includes transaction broadcasting via the onchainos CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 07:45 AM