manifest
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and encourages the installation of the official
@bonasa-tech/manifest-sdkpackage from the NPM registry and interacts with the official Solana mainnet RPC endpoint. - [INDIRECT_PROMPT_INJECTION]: The skill implements logic to ingest and process live market data from the Solana blockchain, which is external, untrusted data.
- Ingestion points:
Market.loadFromAddressandManifestClient.getClientReadOnlymethods used inread-market.tsandmanifest-setup.tsto fetch chain state. - Boundary markers: None explicitly present in the instructional code; data is processed directly via SDK methods.
- Capability inventory: The skill provides capabilities to build and send blockchain transactions via
sendAndConfirmTransactionandbatchUpdateIxinplace-order.ts,global-order.ts, andamm-style-batch.ts. - Sanitization: Not present; the skill treats blockchain-derived market data as standard API inputs for the DEX logic.
Audit Metadata