solana-tx-building
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a technical reference and utility for Solana developers to build transaction messages and inspect on-chain data without handling sensitive credentials or private keys.\n- [EXTERNAL_DOWNLOADS]: The Python scripts utilize the
httpxlibrary for communication with Solana RPC nodes, which is a standard requirement for blockchain interactions.\n- [INDIRECT_PROMPT_INJECTION]: The transaction decoding script processes data from external RPC providers, presenting a standard attack surface for indirect prompt injection via transaction logs or metadata.\n - Ingestion points:
scripts/decode_transaction.pyfetches external transaction data and program logs via RPC calls.\n - Boundary markers: The script utilizes structured JSON-RPC parsing to separate transaction fields and instruction data.\n
- Capability inventory: The script's capabilities are limited to network requests for data retrieval and console output for display.\n
- Sanitization: The script uses structured parsing for known Solana programs and does not execute the ingested content.
Audit Metadata