solana-sniper-bot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's main runtime (scripts/sniper.py and SKILL.md) polls the public Raydium API (https://api.raydium.io/v2/ammV3/ammPools) and public Solana RPC endpoints/holder data for newly created, user-generated token pools and directly uses that untrusted content to decide and execute automated Jupiter trades, so external content can alter agent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill posts to Jupiter's swap endpoint (https://quote-api.jup.ag/v6/swap) at runtime and directly decodes/signs the returned base64 "swapTransaction" to broadcast on-chain, meaning remote content from that URL determines executable transaction instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a cryptocurrency trading bot that performs on-chain financial actions. It requires a Solana private key, SOL for gas/trading capital, and Solana RPC providers (Helius/QuickNode), references the Jupiter aggregator API, and its described behavior includes "Auto-Buy" via Jupiter, "Auto-Sell" exits, and position management with take-profit/stop-loss. These are specific crypto wallet, swap, and transaction-execution capabilities (signing and sending trades), so it grants direct financial execution authority.