solana-security-standard

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URLs mostly point to a GitHub repo, raw GitHub content, an Open VSX extension page, an npm package (npx) and a short ara.so domain — reading these files is low-risk, but the installation instructions (npx package, VSIX/Open VSX extension, and using a third‑party GitHub Action) would execute third‑party code, so they can be used to distribute malware if the authors or packages are untrusted.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow can fetch and ingest outsider-authored free text from public web content via curl -sL https://raw.githubusercontent.com/... (e.g., plugin-guidance.md, security-patterns.yaml, and other rule files), which is then read by the agent/LLM tooling as context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The MCP integration config runs "npx -y @jelleo/solana-security-mcp" (mcpServers "command": "npx", "args": ["-y", "@jelleo/solana-security-mcp"]), which causes npm to fetch and execute remote code at agent runtime to provide scan/list tools the agent calls.