hive-solana-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions explicitly direct the agent to never request private keys or seed phrases from the user, demonstrating security-aware design principles.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from the Solana blockchain (transaction history, token metadata, and mint info) which constitutes a potential surface for indirect prompt injection.
- Ingestion points: Data is fetched via the
solana_analysistoolset, incorporating external providers like Helius and DAS asset data. - Boundary markers: The skill requires the agent to classify identifiers (wallet, mint, etc.) before selecting tools, which provides a structured approach to data handling, although explicit data delimiters for raw blockchain content are not specified.
- Capability inventory: Capabilities are limited to
search_toolsandinvoke_api_endpointfor blockchain data retrieval; the skill lacks file-write or arbitrary command execution permissions. - Sanitization: The procedure includes a mandatory security verification step using the GoPlus Solana pre-execution check for transaction signing guidance.
Audit Metadata