solana-kit
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate developer resource for the @solana/kit SDK. It provides functional examples for blockchain interactions such as transferring SOL, creating tokens, and fetching account data. All behaviors are consistent with its stated purpose as a developer tool.
- [SAFE]: The skill demonstrates standard blockchain development practices, such as loading private keys from local files or environment variables (e.g., in examples/transfer-sol/README.md). These operations are illustrative for local development and do not involve unauthorized data exfiltration.
- [SAFE]: Network operations are correctly directed to well-known Solana RPC infrastructure (e.g., api.devnet.solana.com).
- [SAFE]: Assessment of Indirect Prompt Injection surfaces: The skill facilitates reading untrusted data from the Solana blockchain. Ingestion points: accountNotifications and logsNotifications in examples/subscriptions/README.md and fetchEncodedAccount in examples/fetch-accounts/README.md. Boundary markers: None present in the code snippets. Capability inventory: Transaction signing and sending functionality in templates/project-template.ts and examples/transfer-sol/README.md. Sanitization: None present in the raw data examples. This attack surface is inherent to blockchain-monitoring tools and is documented here for educational purposes without introducing specific vulnerabilities.
Audit Metadata