helius-phantom
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and code patterns for integrating Phantom wallets and Helius infrastructure without any malicious intent.
- [SAFE]: Security is a primary focus, with explicit warnings against exposing API keys in client-side code and providing detailed proxy patterns for Next.js, Express, and Cloudflare Workers.
- [SAFE]: The installation script (
install.sh) is a local utility that correctly copies skill files to the designated platform directories without performing any unauthorized network operations or privilege escalations. - [SAFE]: All external dependencies (e.g.,
@phantom/react-sdk,@solana/kit,helius-sdk) are official or widely recognized packages within the Solana ecosystem. - [SAFE]: Network operations in code examples target trusted vendor domains (
helius-rpc.com,helius.xyz) or well-known services (coingecko.com,jito.wtf) for legitimate purposes such as transaction submission and price fetching.
Audit Metadata