Security checks across malware telemetry and agentic risk
This skill matches its token-launching purpose, but it gives an agent high-impact wallet authority with inconsistent launch/signing documentation and limited user-control safeguards.
Review carefully before installing. Use only a dedicated low-balance wallet, never a main wallet private key, and manually confirm the fee recipient, exact SOL amounts, token metadata, initial buy amount, decoded transaction contents, and final submission. The publisher should resolve the local-mode versus server-signed launch mismatch before users rely on the claim that their wallet is the on-chain creator.
# Sign the transaction with your private key, then submit
SIGNED_TX="..." # sign the base64 transaction from TX_DATA
curl -s -X POST https://api.solpaw.fun/api/v1/tokens/submit \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $SOLPAW_API_KEY" \
-d '{"signed_transaction": "'$SIGNED_TX'", "mint": "MINT_FROM_TX_DATA"}'import { Keypair } from '@solana/web3.js';
const solpaw = new SolPawSkill({
apiEndpoint: 'https://api.solpaw.fun/api/v1',
apiKey: process.env.SOLPAW_API_KEY,
defaultCreatorWallet: process.env.SOLPAW_CREATOR_WALLET,
});66/66 vendors flagged this skill as clean.