pumpfun-sniper

Score any pump.fun token CA for snipe safety (0-100) before buying. Analyzes dev wallet history, social links, liquidity, and holder concentration. Returns S...

This skill is coherent with its stated purpose, but before installing or running it: 1) Verify external endpoints — especially the Herokuapp URL used to fetch pump.fun metadata and the x402 facilitator URL used for payments — to ensure they are trustworthy. 2) Only provide a HELIUS_API_KEY if you understand its scope (it grants read-only access to Helius RPC for wallet/tx lookups; do NOT supply private keys). 3) If self-hosting, inspect api/server.py (payment flow, PAY_TO env) and run in an isolated environment after pip-installing api/requirements.txt. 4) Prefer running the local script with minimal privileges and check network calls (or run behind a network proxy) if you need to limit exfiltration. If you want higher assurance, ask the publisher for confirmation of the pump.fun API origins (why the Herokuapp endpoint is present) or run the scorer with HELIUS_API_KEY omitted (it will still work using default RPC but with reduced wallet-history signals).

Type: OpenClaw Skill Name: pumpfun-sniper Version: 1.0.0 The bundle provides a legitimate utility for scoring Solana 'pump.fun' tokens based on risk factors like developer history, liquidity, and holder concentration. The code in 'scripts/scorer.py' and 'api/server.py' performs standard API requests to blockchain data providers (Helius, DexScreener) and implements a transparent micro-payment protocol (x402) for its hosted version. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions in 'SKILL.md' accurately reflect the tool's functionality.