plugy

Solana trading skill for AI agents. Buy, sell, and create tokens across PumpFun, PumpSwap, LaunchLab, and Meteora.

Do not install or run this skill until you confirm several things: (1) Ask the publisher to explain whether wallets are truly custodial — if they give you a private key, funds are not being held by a custodian. (2) Avoid exposing or storing private keys in agent memory or unencrypted files; prefer a hardware wallet or a secure signing service. (3) Do not blindly run the provided curl install commands — review the contents of each downloaded file (trade.md, create.md, heartbeat.md, rules.md) before trusting them. (4) Verify the ownership and reputation of plugy.fun (domain registration, source code, open repo, audits). (5) If you proceed, limit the agent's privileges (disable autonomous actions, do not persist credentials to agent memory, and keep the privateKey offline). If you want, request the additional remote files and the API spec/source code before installing so a more complete security review can be performed.

Type: OpenClaw Skill Name: plugy Version: 1.0.0 The skill instructs the AI agent to download and execute further instructions from an external domain (plugy.fun) via `curl` commands in `skill.md`, creating a supply chain risk where a compromised remote server could dictate agent behavior. Additionally, the agent is explicitly instructed to handle and store highly sensitive information, including a Solana wallet `privateKey` and an `apiKey`, making it a prime target for prompt injection attacks aiming to extract these credentials from the agent's memory or local storage (`~/.config/plugy/credentials.json`). While these are significant vulnerabilities and risky capabilities, there is no explicit instruction for malicious actions like unauthorized exfiltration or persistence within the provided files.