solana-skill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes examples and endpoints that embed API keys (in a config file and as URL query parameters) and describes importing private keys/seed phrases, which would require the agent to insert or echo secret values verbatim into generated code/requests, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill fetches and ingests public third‑party data (e.g., Helius DAS RPC getAssetsByOwner in scripts/wallet.ts and SKILL.md/references/helius-api.md, and Jupiter API calls in scripts/swap.ts and references/jupiter.md to https://api.jup.ag), and those external responses (asset metadata, swap quotes, swapTransaction) are parsed and used to build/execute transactions and determine actions—so untrusted web content can materially influence tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill calls the Jupiter swap endpoint (https://api.jup.ag/swap/v1/swap) at runtime to fetch a base64-encoded swapTransaction which the code deserializes, signs, and sends—meaning remote content directly supplies the transaction instructions the agent executes and the swap flow depends on this external resource.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed for cryptocurrency financial operations. It provides wallet creation/import (private keys/seed phrases), key storage, balance checks, and—critically—transaction capabilities: sending SOL, sending SPL tokens, and executing token swaps via Jupiter (including endpoints and example code to build, sign, and send transactions). It references Helius RPC/sender endpoints and Jupiter swap APIs. These are specific crypto/blockchain transaction tools (wallet management, signing, and sending transactions), so it grants direct financial execution authority.