solana-easy-swap

Warn

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill reads a Solana keypair JSON file from the filesystem path specified in the SOLANA_KEYPAIR_PATH environment variable. This file contains the unencrypted secret key (private key) of a Solana wallet. The script scripts/swap.mjs loads this key into memory to sign transactions locally. This is a high-risk operation because it grants the agent (and the skill) full control over the funds in that wallet.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the Jupiter API (https://lite-api.jup.ag) to fetch pricing quotes and build transactions. Jupiter is a widely recognized and well-known decentralized exchange aggregator on Solana. Network operations are restricted to obtaining quotes and transaction metadata.
  • [COMMAND_EXECUTION]: The skill is designed to be used via the command line, executing node scripts/swap.mjs with various subcommands. This allows the agent to interact with the Solana blockchain through a structured CLI interface.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection if the external data returned by the Jupiter API were compromised or manipulated (e.g., through a malicious token mint). However, the skill implements safety checks, such as parsing structured JSON and requiring the agent to show a summary to the user for explicit confirmation before signing and executing any transaction.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 20, 2026, 06:07 AM
Security Audit — agent-trust-hub — solana-easy-swap