meteora
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Detailed analysis of all provided skill files, including SDK references and code examples, found no evidence of malicious behavior, prompt injection, or safety guideline bypasses.
- [CREDENTIALS_UNSAFE]: Example scripts (e.g.,
trading-bot.ts,staking.ts) implement secure secret management by accessing private keys through environment variables (process.env.WALLET_SECRET_KEY) rather than hardcoded strings. - [EXTERNAL_DOWNLOADS]: The skill directs users to install standard, scoped NPM packages (
@meteora-ag/*) and official Solana libraries. It also includes instructions for cloning the officialmeteora-inventCLI from GitHub, which are established practices within the Solana developer ecosystem. - [COMMAND_EXECUTION]: Code examples demonstrate legitimate programmatic interactions with the Solana blockchain for DeFi operations such as swapping, liquidity provision, and staking using well-known SDKs.
Audit Metadata