Caveat verdict
pumpfun-launch
Accesses credentials AND encodes data
Token launcher on Solana/pump.fun that mandates user confirmation, dry-run first, and cost warnings; credential_access is limited to a locally-stored private key and behavior is consistent with a legitimate on-chain token creation tool.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses credentials AND encodes data — may obfuscate stolen credentials
LLM02 · ASI03 · ASI04
Permission integrity
credential_access
Findings (2)
Possible hardcoded credential
launch.ts · prose · downgraded · password: ");
try {
const raw = fs.readFileSync(walletPath,
Accesses sensitive environment variables
launch.ts · prose · downgraded · process.env.WALLET_PRIVATE_KEY
Permissions & capabilities
No declared permissions — minimal attack surface.
credential_accessdata_encoding Thanks — recorded.