solana-onboarding

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides UI components and pedagogical documentation to help developers implement secure and user-friendly Solana onboarding flows.
  • [COMMAND_EXECUTION]: In accordance with the development workflow described in SKILL.md and references/installing.md, the skill instructs the agent to run standard project build commands (e.g., npm run build) after modifying the codebase. This is a legitimate development task used to verify that the newly installed components are correctly integrated and do not cause build regressions.
  • [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the well-known and trusted lucide-react iconography library. It manages this through standard Node.js package managers (NPM/Yarn) as specified in the package.json and components/manifest.json files.
  • [DATA_EXPOSURE]: The skill analyzes user-provided error strings and code snippets locally to provide contextual help and diagnostic recommendations. It does not access sensitive system paths (like SSH keys or environment secrets) or attempt to exfiltrate information to external servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:12 AM
Security Audit — agent-trust-hub — solana-onboarding