jupiter-swap-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code snippets for integrating with the Jupiter aggregator API. The implementation details are consistent with standard decentralized finance (DeFi) development practices.
- [COMMAND_EXECUTION]: The provided TypeScript examples use standard libraries such as
@solana/web3.jsand built-infetchcalls to interact with legitimate Jupiter API endpoints (jup.ag). No unauthorized or dangerous shell commands were detected. - [DATA_EXPOSURE_EXFILTRATION]: The skill does not access sensitive local files (e.g.,
.env,.ssh,.aws/credentials) and does not hardcode private keys or secrets. It correctly instructs the user to use a wallet adapter for transaction signing. - [INDIRECT_PROMPT_INJECTION]: While the skill defines patterns for processing external API data and user inputs, it includes necessary validation logic, such as slippage checks and price impact assessments, which are best practices for securing automated trading logic.
- [OBFUSCATION]: The use of Base64 decoding (
Buffer.from(..., 'base64')) is standard for handling binary Solana transactions returned by REST APIs and does not represent a malicious obfuscation attempt.
Audit Metadata