phantom-wallet-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and execution of the
@phantom/mcp-serverpackage vianpx. This is the official server for interacting with the Phantom wallet service. - [COMMAND_EXECUTION]: The skill provides tools for high-privilege operations such as
transfer_tokens,buy_token, andsign_transaction. These are core functionalities of the wallet integration and require explicit user input for each action. - [INDIRECT_PROMPT_INJECTION]: As the skill ingests user-provided data (e.g., token names, recipient addresses, and messages) to perform sensitive blockchain operations, it possesses an attack surface for indirect prompt injection.
- Ingestion points: User prompts containing transaction details or messages to sign (SKILL.md).
- Boundary markers: None explicitly defined in the provided instruction file.
- Capability inventory: Includes token transfers, token swaps, and transaction signing across multiple blockchains.
- Sanitization: Relies on the underlying MCP server and wallet validation logic to ensure transaction integrity.
Audit Metadata