solana-agent-kit

SUSPICIOUS. The skill is purpose-aligned and uses mostly legitimate same-project npm distribution, but it enables autonomous blockchain transactions and forwards a raw wallet private key into agent/MCP processes. The main risk is real-world financial autonomy plus sensitive-key handling, not hidden malware or deceptive exfiltration.

No clear indicators of classic malicious code (obfuscation, backdoors, eval/Function-based payloads, suspicious exfiltration, or system tampering) are present in the provided fragment. However, the module is inherently high security risk because it loads a real Solana private key, enables LLM-driven autonomous/event-triggered on-chain actions via Solana tools, and the safety guardrails shown appear not to be enforced in the primary execution flows. The likely risk is unintended or attacker-influenced financial actions (e.g., prompt/trigger-driven trades), rather than covert malware.