Tokenized agents pump.fun

Build payment flows for Pump Tokenized Agents using @pump-fun/agent-payments-sdk. Use when accepting payments, building accept-payment transactions, integrat...

This skill appears to do what it says — help build Solana payment flows — but there are a few things to check before using it: - Manifest vs SKILL.md mismatch: the skill metadata declares no required env vars, but the instructions require SOLANA_RPC_URL, NEXT_PUBLIC_SOLANA_RPC_URL, AGENT_TOKEN_MINT_ADDRESS, and CURRENCY_MINT. Treat that as a documentation/package quality issue; set only the env vars you intend and verify what the running code will read. - Third‑party packages: the instructions tell you to install @pump-fun/agent-payments-sdk and Solana libraries from npm. Before npm installing, review the SDK on npm/GitHub (source, authors, recent activity) to ensure it is trustworthy and to confirm the correct version ranges. - RPC providers: the doc suggests using public RPC endpoints (rpc.solanatracker.io, rpc.ankr.com). Using someone else's RPC means RPC operators can see transaction metadata and IPs, and free endpoints can be rate‑limited or unreliable. Prefer your own RPC provider or understand the privacy/availability tradeoffs. - Secrets: the skill explicitly warns not to log private keys and not to sign on behalf of users. Follow that: never put wallet secret keys in .env for client wallets, and only handle signing keys on servers if you fully control and secure them. - Verification: implement server-side verification (validateInvoicePayment) exactly as instructed before delivering paid services. If you plan to install and run this SDK, inspect the SDK source (package.json, repository, published code) and pin versions to avoid dependency surprises. If you want a stronger assurance, ask the skill author for a link to the SDK repository and for the package's integrity (source URL, checksum, or repository) before installing.

Type: OpenClaw Skill Name: pump-fun-tokenized-agents Version: 1.0.0 The skill bundle provides legitimate instructions and code templates for integrating Solana-based payments using the @pump-fun/agent-payments-sdk. It includes strong safety guidelines, such as prohibiting the handling of private keys by the agent and requiring server-side verification of transactions. The logic and external references (e.g., to GitHub and public Solana RPCs like Solana Tracker) are consistent with the stated purpose of building payment flows for tokenized agents.