solana-kit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow only fetches and processes Solana RPC/account/transaction data (e.g., JSON fields like logs) using user-supplied endpoints and addresses, but it does not ingest outsider-authored free text through an unspecific “feed/queue” write path within this skill.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Solana blockchain SDK. It includes functions to generate keypair signers, construct transfer instructions (getTransferSolInstruction), sign transaction messages (signTransactionMessageWithSigners / partiallySign...), and send transactions (sendAndConfirmTransactionFactory, sendTransactionWithoutConfirmingFactory, rpc.sendTransaction). The minimal example demonstrates creating signers, building a transfer for 0.1 SOL, signing it, and sending/confirming the transaction — i.e., direct ability to move cryptocurrency.