solana-agent-kit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction references an external installation script URL from GitHub (https://raw.githubusercontent.com/sendaifun/solana-mcp/main/scripts/install.sh) which is fetched and executed during setup, representing an unverifiable runtime external dependency from an unofficial repository source.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly provides tools and capabilities for blockchain operations on Solana, including executing DeFi operations (swapping tokens via Jupiter, creating AMM/liquidity pools), transferring SOL or SPL tokens, staking, and trading perps. These fall squarely under the category of crypto/blockchain execution and direct financial operations.