solana-mobile-wallet
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to use
npx solana-mobile@latestfor project initialization, which is a standard developer workflow for bootstrapping reference applications provided by the vendor. - [EXTERNAL_DOWNLOADS]: Recommends installing official Solana and mobile integration libraries from the NPM registry, including
@wallet-ui/react-native-kitand@solana/kit, to provide necessary blockchain functionality. - [CREDENTIALS_UNSAFE]: Includes explicit security warnings to prevent credential exposure by advising developers to store sensitive RPC keys in server-side configurations rather than client-side environment variables.
- [INDIRECT_PROMPT_INJECTION]: Defines a surface area for processing external data from wallets, such as account labels and addresses. The skill mitigates risks associated with untrusted data by using strong TypeScript types and standard React Native components for rendering.
Audit Metadata