velodrome-v2-plugin
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill setup logic performs version checks and downloads its core binary from the official OKX GitHub organization. These resources are verified vendor assets used for distribution.
- [COMMAND_EXECUTION]: The skill executes the
onchainosCLI tool to facilitate wallet interactions. This is a functional requirement for the skill to retrieve public wallet addresses and request transaction signatures from the user's connected wallet. - [REMOTE_CODE_EXECUTION]: The installation script for the skill fetches a setup script from the official
onchainos-skillsrepository. The process includes an integrity check that verifies the SHA256 checksum of the installer before execution to prevent man-in-the-middle attacks. - [SAFE]: No malicious patterns such as prompt injection, data exfiltration of private keys, or code obfuscation were found. The skill maintains a clear security boundary by requiring explicit user confirmation flags (
--confirm) for all on-chain write operations.
Audit Metadata