sol-mobile
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements the Solana Mobile Wallet Adapter (MWA) protocol according to official security standards. By design, the MWA protocol ensures that private keys and seed phrases are never shared with the dApp; all signing operations occur within the isolated environment of a separate wallet app (e.g., Phantom or Solflare).
- [SAFE]: The code snippets include mandatory input validation for blockchain addresses using
new PublicKey(address)and amount parsing withparseFloat(), which mitigates common risks associated with processing untrusted user input. - [DATA_EXPOSURE]: The skill demonstrates storing an
auth_tokeninAsyncStoragefor session re-authorization. This is a standard and documented feature of the MWA protocol to facilitate 'silent' re-authorization for improved user experience. The token is an opaque identifier and does not contain or expose private keys. - [EXTERNAL_DOWNLOADS]: The skill references the installation of standard, well-known libraries in the Solana and React Native ecosystem, such as
@solana/web3.js,@solana/spl-token, and@solana-mobile/mobile-wallet-adapter-protocol. It also includes integration with the well-known Jupiter Aggregator API (jup.ag) for token swap functionality.
Audit Metadata