ranger-finance

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to download and install various external resources related to the Ranger Finance ecosystem:
  • TypeScript SDK demo repository: https://github.com/ranger-finance/sor-ts-demo.git.
  • AI Agent Kit repository: https://github.com/ranger-finance/ranger-agent-kit.git.
  • Standard Python packages mcp-agent and numpy via the pip or uv package managers.
  • Standard Node.js packages such as @solana/web3.js, bs58, and dotenv via npm.
  • [SAFE]: Several security-conscious design choices are implemented in the provided code and documentation:
  • Secret Management: The documentation consistently emphasizes storing sensitive credentials like WALLET_PRIVATE_KEY and RANGER_API_KEY in environment variables rather than hardcoding them.
  • Local Signing: The code examples demonstrate local transaction signing using the Solana Web3 library, ensuring that private keys are never transmitted to the Ranger Finance API or other external services.
  • Vendor Verification: The external links, GitHub repositories, and package names are consistent with the project's identity and established Solana ecosystem tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:31 AM
Security Audit — agent-trust-hub — ranger-finance