x402agent/pump-website
.agents/skills/pump-website/SKILL.md
PumpOS — static HTML/CSS/JS web desktop for the Pump SDK with 169 Pump-Store apps, live token dashboards, interactive DeFi tools, PWA support, and Vercel deployment.
$ install --global
skillsauthnpx skillsauth add x402agent/solana-clawd pump-websiteInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 2:38 AM7.5s1 file scanned
SKILL.md
- name:
- pump-website
- description:
- PumpOS — static HTML/CSS/JS web desktop for the Pump SDK with 169 Pump-Store apps, live token dashboards, interactive DeFi tools, PWA support, and Vercel deployment.
- homepage:
- https://github.com/nirholas/pump-fun-sdk
PumpOS Website — Static Web Desktop
PumpOS is a fully static HTML/CSS/JS web desktop environment — a browser-based OS simulation themed around Solana DeFi. No framework, no build step. Deployed on Vercel at pumpos.app.
Key Files
| File | Purpose |
|------|---------|
| website/index.html | Desktop shell — taskbar, windows, start menu, wallpaper |
| website/script.js | App management, window lifecycle, taskbar, default apps |
| website/system32.js | OS kernel — event bus, IPC routing, user system |
| website/pump.css | Design system tokens — colors, spacing, radii, easing |
| website/style.css | Full component styles — windows, taskbar, menus |
| website/sw.js | Service worker — cache-first PWA |
| website/live.html | Real-time token launch dashboard (WebSocket relay) |
| website/vercel.json | Static deployment config with SPA rewrite |
Architecture
- Single HTML page (
index.html) as the desktop shell - Apps loaded as HTML fragments in iframes
system32.jsprovides event bus + IPC between apps viapostMessagescript.jsmanages window lifecycle, taskbar, and 30 built-in apps- 24 JS modules in
website/scripts/(kernel, window manager, wallet-connect, etc.)
Pump-Store Apps (143)
All in website/Pump-Store/apps/ as individual .html files. Database at Pump-Store/db/v2.json. Categories:
- DeFi tools — bonding curve calculator, DEX aggregator, fee manager, fee tier explorer
- Trading — trading signals, token sniper, multichart, orderbook, watchlist
- Analytics — on-chain analytics, whale flow, smart money, correlation matrix
- Monitoring — liquidation heatmap, gas predictor, MEV detector, whale alerts
- Portfolio — portfolio tracker, PnL leaderboard, position calculator
- SDK-specific — pump-sdk-reference, token-launcher, token-launch-sim, creator-fee-sharing, migration-tracker
Design System
CSS custom properties in pump.css:
- Primary accent:
#00e87b(Pump green) - Background:
#0a0a0a→#111111→#1a1a1a(dark theme) - Border radius: 3-tier system (
0.7em/0.35em/0.233em) - Responsive breakpoint at 768px
- Custom cubic-bezier easing curves
PWA Support
- Service worker with cache-first strategy
- Web app manifest with standalone display mode
web+pump://protocol handler- Installable with proper icons (512×512)
Deployment
- Vercel (static, no framework, no build command)
- SPA routing: all non-asset paths rewrite to
/index.html /libs/and/assets/get immutable caching (1 year)- API proxy function at
api/proxy.js
Patterns to Follow
- No frameworks — vanilla HTML/CSS/JS only
- Apps are self-contained HTML files loaded in iframes
- Use
system32.jsevent bus for inter-app communication - All crypto operations run client-side
- Use CSS custom properties from
pump.cssfor theming
Common Pitfalls
- Service worker caching may serve stale content — version your cache
system32.jsIPC requires apps to listen forpostMessageevents- Pump-Store app HTML must be self-contained (no external dependencies beyond libs/)
- The
script.jsdefault app list controls first-launch pins — update it when adding built-in apps
Related Skills
x402agent/qedgen
development
VerifiedTrustedCommunity
Formally verify programs by writing Lean 4 proofs. Trigger this skill whenever the user wants to formally verify code, generate Lean 4 proofs, prove properties about algorithms or smart contracts, verify invariants, convert program logic into formal specifications, or anything involving Lean 4 and formal verification. Also trigger when the user mentions "qedgen", "lean proof", "formal proof", "verify my code", "prove correctness", "formal verification", or wants mathematical guarantees about their implementation.
15SKILL.mdUpdated Apr 19, 2026
x402agent/skills/swarm-orchestrator
data-ai
VerifiedTrustedCommunity
Orchestrate multi-bot trading swarms on Pump.fun with persona-driven agents
14SKILL.mdUpdated Apr 19, 2026
x402agent/solana-dev
tools
VerifiedTrustedCommunity
End-to-end Solana development playbook (Jan 2026). Prefer Solana Foundation framework-kit (@solana/client + @solana/react-hooks) for React/Next.js UI. Prefer @solana/kit for all new client/RPC/transaction code. When legacy dependencies require web3.js, isolate it behind @solana/web3-compat (or @solana/web3.js as a true legacy fallback). Covers wallet-standard-first connection (incl. ConnectorKit), Anchor/Pinocchio programs, Codama-based client generation, LiteSVM/Mollusk/Surfpool testing, and security checklists.
14SKILL.mdUpdated Apr 19, 2026
x402agent/skills/pumpfun-trading
tools
VerifiedTrustedCommunity
Buy and sell tokens on Pump.fun bonding curves and AMM pools
14SKILL.mdUpdated Apr 19, 2026