solana-easy-swap
Warn
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill reads a Solana keypair JSON file from the filesystem path specified in the
SOLANA_KEYPAIR_PATHenvironment variable. This file contains the unencrypted secret key (private key) of a Solana wallet. The scriptscripts/swap.mjsloads this key into memory to sign transactions locally. This is a high-risk operation because it grants the agent (and the skill) full control over the funds in that wallet. - [EXTERNAL_DOWNLOADS]: The skill communicates with the Jupiter API (
https://lite-api.jup.ag) to fetch pricing quotes and build transactions. Jupiter is a widely recognized and well-known decentralized exchange aggregator on Solana. Network operations are restricted to obtaining quotes and transaction metadata. - [COMMAND_EXECUTION]: The skill is designed to be used via the command line, executing
node scripts/swap.mjswith various subcommands. This allows the agent to interact with the Solana blockchain through a structured CLI interface. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection if the external data returned by the Jupiter API were compromised or manipulated (e.g., through a malicious token mint). However, the skill implements safety checks, such as parsing structured JSON and requiring the agent to show a summary to the user for explicit confirmation before signing and executing any transaction.
Audit Metadata