jupiter-token-verification
Warn
Audited by Socket on Mar 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is broadly aligned with Jupiter token verification and uses plausible same-org domains plus a standard Solana SDK, but it facilitates an on-chain payment flow, includes local keypair handling in its example, and relies on a dev API/pricing model that is not clearly consistent with Jupiter’s public documentation. This is not confirmed malware, but it carries meaningful security and financial-action risk for an AI agent skill.
Confidence: 85%Severity: 66%
Audit Metadata