orca-lp

• Analyzed: May 3, 2026, 6:41 AM
• Findings: 1
• Version: 1.0.5
• Hash: 3951716124e17179be5000dbd4adab2fa7202bd82310592d0940c0b09b1a81c9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The orca-lp-analytics skill bundle is a legitimate toolset for analyzing and managing Orca Whirlpool liquidity positions on the Solana blockchain. It utilizes official Orca REST, Beachhouse, and Snorkel APIs for data retrieval and the standard @orca-so/whirlpools-sdk for on-chain operations. While the skill handles sensitive Solana keypairs (KEYPAIR_PATH), the code logic is strictly limited to transaction signing and local execution via npx tsx. The SKILL.md instructions include robust safety guardrails, such as mandatory dry-run simulations, explicit confirmation flags for write operations, and strict reporting rules to prevent misleading financial projections. No evidence of data exfiltration, malicious prompt injection, or unauthorized execution was found.