orca
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code templates for interacting with the Orca Whirlpools protocol. The analysis found no evidence of prompt injection, obfuscation, or malicious persistence mechanisms.
- [DATA_EXPOSURE]: Several code examples demonstrate loading a Solana wallet from a local
keypair.jsonfile usingfs.readFileSync. This practice is standard for local development and non-custodial automated tools. The keys are used exclusively for local transaction signing within the official SDK context, and no network exfiltration patterns were observed. - [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, well-known packages from the Solana and Orca ecosystems via NPM. These include
@orca-so/whirlpools,@solana/kit, and@coral-xyz/anchor. These are established libraries used by the Solana developer community.
Audit Metadata