Skip to content
Back to skills

Repo Integrations

ASecurity

**Branch:** `feat/pump-swap-quote-skill` **Source repo:** https://github.com/nirholas/pump-swap-sdk **One PR. Standalone. No other prompt is required to be shipped first.**

  • 7 stars
  • 0 votes
  • 0 copies
  • 9 views
  • Added June 7, 2026
testinggonodegitapi

Works with

  • api
  • mcp

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned June 7, 2026

npx -y skills add nirholas/three-ui --skill repo-integrations --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Repo Integrations?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Repo Integrations
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/nirholas-repo-integrations/badge)](https://www.skillsdirectory.com/skills/nirholas-repo-integrations)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# 10 — Pump-swap quote + simulate skill

**Branch:** `feat/pump-swap-quote-skill`
**Source repo:** https://github.com/nirholas/pump-swap-sdk
**One PR. Standalone. No other prompt is required to be shipped first.**

## Why it matters

The project already depends on `@pump-fun/pump-swap-sdk` (see [package.json](../../package.json)). The 3D agent has trade/compose skills but no clean "what would a swap of X cost right now?" quote skill. Adding a quote-only skill (no signing, no tx send) lets the LLM answer "is now a good time?" without risk and gives the agent something safe to do during demos.

## Read these first

| File | Why |
| :--- | :--- |
| [src/agent-skills-pumpfun.js](../../src/agent-skills-pumpfun.js) | Skill registration. |
| [src/agent-skills-pumpfun-compose.js](../../src/agent-skills-pumpfun-compose.js) | Existing trade-adjacent compose skills — match style. |
| [api/pump-fun-mcp.js](../../api/pump-fun-mcp.js) | MCP tool list. |
| `node_modules/@pump-fun/pump-swap-sdk/` (already installed) | API surface for quoting. |

## Build this

1. Add `src/pump/pump-swap-quote.js` exporting:
    ```js
    export async function quoteSwap({ inputMint, outputMint, amountIn, slippageBps = 100 })
    // Returns { amountOut, priceImpactBps, route, expiresAtMs } using @pump-fun/pump-swap-sdk.
    // Throws on invalid mints or unreachable RPC.
    ```
2. Register a skill `pumpfun.quoteSwap` in [src/agent-skills-pumpfun.js](../../src/agent-skills-pumpfun.js) with the same args.
3. Register an MCP tool `pumpfun_quote_swap` in [api/pump-fun-mcp.js](../../api/pump-fun-mcp.js).
4. Add `tests/pump-swap-quote.test.js` mocking the SDK and asserting args are passed through and shape is normalized.

## Out of scope

- Actually executing the swap (signing or sending). This is read-only.
- Token-list resolution for symbols → mints. Caller passes mint addresses.
- Persisting quotes.

## Acceptance

- [ ] `node --check src/pump/pump-swap-quote.js` passes.
- [ ] `npx vitest run tests/pump-swap-quote.test.js` passes.
- [ ] Skill + MCP tool callable.
- [ ] `npx vite build` passes.

## Test plan

1. Call the skill with `inputMint = So11111111111111111111111111111111111111112` (wSOL), a known active pump.fun token mint as `outputMint`, `amountIn = 0.01 SOL` worth of lamports. Confirm a non-zero `amountOut`.
2. Pass garbage mints; confirm a clean error.
3. Call MCP tool with same args; confirm same result.

## Reporting

- Shipped: …
- Skipped: …
- Broke / regressions: …
- Unrelated bugs noticed: …

Files in this skill

  • 01-pumpkit-whale-alerts.md3.5 KB
  • 02-pumpkit-claim-monitor.md3.1 KB
  • 03-pumpkit-channel-feed.md2.7 KB
  • 04-pumpkit-telegram-delivery.md2.7 KB
  • 05-pumpfun-claims-bot-feed.md2.6 KB
  • 06-claim-alerts-agent-home.md2.7 KB
  • 07-cf-workers-mcp-mirror.md3 KB
  • 08-pump-fun-skills-port.md2.9 KB
  • 09-skill-manifest-export.md2.6 KB
  • 10-pump-swap-quote-skill.md2.5 KB
  • 11-kol-quest-smart-money-widget.md2.8 KB
  • 12-kol-leaderboard-skill.md2.2 KB
  • 13-wallet-pnl-skill.md2 KB
  • 14-gmgn-smart-wallets-ingest.md2.4 KB
  • 15-radar-signals-skill.md2.2 KB
  • 16-x-post-price-impact-skill.md2.3 KB
  • 17-cashtag-sentiment-skill.md2.4 KB
  • 18-realtime-trade-visualizer-widget.md2.5 KB
  • 19-trades-into-3d-scene.md2.8 KB
  • 20-launchpad-ui-port-studio.md2.7 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.