kora-operator
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration techniques were detected in the skill instructions or scripts.
- The skill provides comprehensive security guidance, explicitly warning operators about potential risks like fee-payer fund drainage and insecure pricing models.
- It encourages best practices such as using HMAC authentication, reCAPTCHA, and restrictive fee-payer policies.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading official vendor tools and container images from well-known registries.
- Refers to the official
kora-clitool via the Rustcargopackage manager. - References Docker images hosted on the GitHub Container Registry (
ghcr.io/solana-foundation/kora). - [COMMAND_EXECUTION]: The guide includes standard administrative and development commands necessary for the described use case.
- Includes CLI commands for node operation, such as
kora rpc startandkora config validate. - Mentions the use of a
justfilefor development tasks like building and running tests (just build,just unit-test).
Audit Metadata