Solana Development Workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs Claude to use the Account Explorer and Transaction Analyst agents to fetch and analyze public Solana account and transaction data (see "Claude uses Account Explorer or Transaction Analyst agent" in Core Workflows and Pattern 2), which are untrusted, user-generated third-party sources that the agent reads and could materially influence subsequent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly built for Solana blockchain operations and includes workflows that perform real on-chain transactions: "Execute & Confirm" and "Safe Transfer" describe sending SOL and tokens, "Execute the swap" and "Swap USDC for SOL" are explicit asset trades, and tools referenced (e.g., solana-onchain-mcp transfer tools) indicate on-chain transfer/account-creation capabilities. It also distinguishes devnet vs mainnet and requires an acceptance step for mainnet, and it returns transaction hashes/confirmations. These are specific, explicit crypto transaction execution capabilities (signing/sending swaps/transfers), not generic tooling.