pump-shell-scripts

name: pump-shell-scripts description: "Production-quality Bash scripts for Solana vanity generation, keypair verification, batch operations, dependency auditing, and test orchestration — with security-hardened patterns including file permissions, input validation, and cleanup traps." metadata: openclaw: homepage: https://github.com/nirholas/pump-fun-sdk requires: bins: - bash - solana-keygen

Shell Scripting & CLI Tools — Production Bash Scripts

Production-quality Bash scripts for vanity generation, keypair verification, batch operations, dependency auditing, and test orchestration with security-hardened patterns.

Scripts Overview

Keypair Verification (7 Points)

verify_keypair() {
    # 1. File exists
    # 2. Valid JSON array
    # 3. Exactly 64 bytes
    # 4. File permissions are 0600
    # 5. solana-keygen verify passes
    # 6. Public key matches filename
    # 7. Re-derive public key from secret matches
}

Security Patterns

# Cleanup trap
trap 'cleanup_temp_files' EXIT ERR INT TERM

# File permissions
chmod 600 "$keypair_file"

# Input validation
validate_base58() {
    [[ "$1" =~ ^[1-9A-HJ-NP-Za-km-z]+$ ]] || die "Invalid Base58"
}

# No shell injection
# Use "$var" (quoted) everywhere, never $var

Makefile Integration

Patterns to Follow

• Source scripts/utils.sh in all scripts for shared utilities
• Use set -euo pipefail at the top of every script
• Quote all variable expansions: "$var" not $var
• Use trap for cleanup of temporary files
• Validate all user input (Base58, paths, integers)
• Set chmod 600 on any keypair file immediately after creation

Common Pitfalls

• solana-keygen verify expects the address as the first argument, not the file
• shred is not available on all systems — check with command -v
• mktemp patterns differ between macOS and Linux
• read -r is essential to prevent backslash interpretation
• Always use [[ ]] over [ ] for conditionals