solana-dev

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several of the URLs point to direct installer scripts and release archives hosted on non-official domains or GitHub release assets (curl|sh installers, .sh and .tar.bz2 downloads and release pages), which are high-risk distribution vectors for malware unless the sources are independently verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Solana Developer MCP is auto-installed and then the agent can use “Solana Documentation Search” / “Solana Expert: Ask For Help”, which at runtime can ingest provider-accessed untrusted free-text content from the docs/tool outputs (depending on how the MCP returns results).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL explicitly instructs running the Bash command "claude mcp add --transport http solana-mcp-server https://mcp.solana.com/mcp" at conversation start, which installs/links an external MCP server (https://mcp.solana.com/mcp) that the agent will query at runtime to provide docs/expert responses and therefore can directly influence prompts and behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Solana blockchain development and includes wallet connection and signing flows, transaction building/sending/confirmation UX, and client SDK usage for RPC + transaction sending (e.g., "createClient ... for RPC + transaction sending", "Wallet connection + signing flows", and guidance on simulateTransaction and signing). These are specific crypto/blockchain transaction capabilities (wallet signing and sending transactions), which constitute direct financial execution authority for on-chain transfers.