Solana
v1.0.0Assist with Solana transactions, token accounts, priority fees, and program interactions.
⭐ 2· 1.2k·7 current·7 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Solana tooling and transaction guidance) matches the SKILL.md content. Minor inconsistency: the documentation mentions CLI commands (solana, spl-token) and RPC providers, but the registry metadata declares no required binaries or RPC credentials. This is not necessarily malicious, but the skill assumes the agent or user environment may already have those tools/keys available.
Instruction Scope
SKILL.md stays on-topic: it gives guidance about rent, token accounts, fees, errors, RPCs, explorers, and wallet safety. It does not instruct the agent to read unrelated files, exfiltrate data, or call unexpected external endpoints. Example CLI commands and RPC endpoints are referenced as examples rather than as covert data sinks.
Install Mechanism
No install spec and no code files — lowest-risk form. Nothing is downloaded or written to disk by this skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. The content references paid RPC providers (Helius, QuickNode, Triton) as recommendations, which is reasonable for production usage and does not require the skill to hold credentials itself.
Persistence & Privilege
always:false and default invocation settings — the skill does not request permanent inclusion or elevated privileges. There are no instructions to modify other skills or agent-wide configuration.
Assessment
This skill is essentially a Solana reference sheet and appears coherent. Before enabling or letting an agent use it, consider: (1) it mentions CLI tools (solana, spl-token) but doesn't declare them as required — the agent won't be able to execute those commands unless the environment provides them; (2) the skill asks for no credentials, but any agent you pair with it could still be given wallet private keys or RPC API keys elsewhere — never paste private keys into chats or skill inputs; (3) when following its advice in production, use dedicated paid RPC providers and burner wallets for risky interactions; (4) the skill has no homepage/source listed — if you require provenance, ask the publisher for more info before trusting it in high-value contexts.Like a lobster shell, security has layers — review code before you run it.
latestvk97d48pr0wete6pzn9w6t1b0yx80vg00
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
◎ Clawdis
OSLinux · macOS · Windows