sky-lending
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes the onchainos CLI installation script from OKX's official GitHub repository during the pre-flight setup phase.
- [EXTERNAL_DOWNLOADS]: Downloads the platform-specific sky-lending binary from the MigOKG/plugin-store repository on GitHub.
- [DATA_EXFILTRATION]: Transmits installation telemetry, including a hashed device fingerprint, to the vendor's reporting endpoints at Vercel and OKX. This data is used for plugin usage statistics and does not involve sensitive personal credentials or files.
- [COMMAND_EXECUTION]: Uses the system command line to interact with the onchainos tool for wallet address resolution and contract interaction simulations.
Audit Metadata