The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes official development tools and SDKs from Helius Labs and DFlow Protocol. These include the helius-mcp server, helius-sdk, and the helius-laserstream library for high-performance data streaming. These are well-known, reputable infrastructure providers in the Solana ecosystem.
[COMMAND_EXECUTION]: The instructions guide the user to configure their environment using standard commands such as claude mcp add for tool installation and helius signup via the CLI. These are user-initiated configuration steps for established developer tools.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles sensitive operations such as account signup and API key management. It follows best practices by using environment variables for keys and local storage for CLI-generated keypairs. It explicitly warns against embedding private keys in code or logs and instructs the agent to handle identity and balance data through structured MCP tools.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external data from the Solana blockchain and DFlow market APIs (e.g., transaction history, asset metadata, and real-time price feeds). While this is a standard attack surface for blockchain agents, the skill focuses on building developer tools and does not instruct the agent to autonomously execute instructions found within untrusted data.
[SAFE]: All external resources, including API endpoints (helius-rpc.com, dflow.net, pond.dflow.net), explorers (orbmarkets.io), and Jito tip accounts, are verified as official services for the platforms described. The skill provides clear guidance on jurisdictional compliance for prediction markets and uses Stripe Identity (a trusted vendor) for KYC verification.

helius-dflow