solana
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Solana Command Line Interface (CLI) installation script from the project's official release domain.
- [REMOTE_CODE_EXECUTION]: Includes a shell command to download and execute the official Solana installation script via curl and sh.
- [DATA_EXFILTRATION]: Conducts network communication with public Solana RPC nodes and the CoinGecko market API to retrieve on-chain and pricing information.
- [COMMAND_EXECUTION]: Utilizes the Solana CLI to interact with the blockchain environment through commands such as 'solana balance'.
- [DATA_EXFILTRATION]: Ingests blockchain data which represents an indirect prompt injection surface. 1. Ingestion points: JSON-RPC responses in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Network requests and command execution. 4. Sanitization: Uses standard JSON parsing.
Audit Metadata