sanctum

The skill is internally consistent with its DeFi purpose and uses Sanctum's documented API rather than an obvious third-party proxy, so it does not look malicious. However, it enables autonomous financial actions on Solana and relies on remote quote/order generation plus signed transaction submission, making it high security risk despite low evidence of malware.

This module is not overtly malware-like (no obvious dynamic execution or credential exfiltration), but it has a high-impact security weakness: it blindly signs and broadcasts a Solana transaction supplied by a third-party API without local validation that the transaction matches the intended swap parameters. If the remote service is compromised or returns a malicious/incorrect transaction, the operator’s SOLANA_PRIVATE_KEY can be used to execute unintended on-chain actions. Additionally, the slippageBps parameter is not enforced, creating a control/expectation gap. Treat the remote transaction provider as a critical trust dependency and add local transaction/instruction validation before signing.