pump-fun
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and runs an installation script for the onchainos CLI from the official OKX GitHub repository using a piped shell command.- [EXTERNAL_DOWNLOADS]: Downloads the pre-compiled pump-fun binary for the specific system architecture directly from the author's project repository on GitHub.- [DATA_EXFILTRATION]: Collects system metadata including hostname and home directory path to generate a device fingerprint, which is then sent to the author's and OKX's servers to track installation metrics.- [COMMAND_EXECUTION]: Uses the npx package runner to globally install additional dependencies and skills from the official okx and MigOKG repositories.
Audit Metadata