ai-strategy

SUSPICIOUS. The skill’s capabilities match its stated trading purpose, but it requests a raw Solana private key and enables automated real-world financial actions with unclear signing and credential-handling boundaries. No malicious installer or obvious exfiltration endpoint is shown, yet the combination of private-key access and autonomous trade execution makes the overall security risk high.

This is a Solana trading automation module, not evidence of malware or credential theft. It fetches public prices from price.jup.ag and can execute real swaps using the configured wallet; user-controlled commands, default amounts, full-balance sells, and unbounded parameters create a meaningful financial safety risk. User text is returned in Markdown without escaping, which may be unsafe if a downstream renderer treats it as trusted content. Severity: medium to high for unintended trades; no suspicious domains, hardcoded credentials, or direct secret transmission were found.