solana
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from the Solana mainnet-beta RPC and the CoinGecko public API to enrich blockchain data with USD prices. These are well-known services and the communication is restricted to these specific endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted external sources, including blockchain state and third-party API responses.
- Ingestion points: External data is retrieved from Solana RPC and CoinGecko via
urllib.requestinscripts/solana_client.py. - Boundary markers: The script formats all output as structured JSON, providing clear delimiters for the consuming agent.
- Capability inventory: The skill's scripts are restricted to read-only network queries; they do not perform file writes, subprocess execution, or privilege-escalating actions.
- Sanitization: Content is processed using the standard library's JSON parser, which provides basic structural validation.
Audit Metadata