Security audit

Solana On-Chain Agent Registry, Reputation & Trust

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Solana SDK guide, but it asks agents to use a raw wallet private key and perform irreversible blockchain writes without enough safety scoping or warnings.

Review this skill before installing if you plan to give the agent wallet access. Use a low-value delegated wallet, keep private keys out of general agent environments when possible, prefer external signing or skipSend flows, pin and review npm dependencies, and require explicit human confirmation before transfers, metadata deletion, immutable metadata writes, or other on-chain mutations.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: skill.md:16
Finding: Unpinned npm Dependencies Execute in a Wallet-Sensitive Environment
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs users to load a Solana private key directly from the SOLANA_PRIVATE_KEY environment variable and materialize it into a Keypair for write operations, but it provides no warning about secret handling, least-privilege use, or the risk of exposing a hot wallet to an agent runtime. In the context of an agent skill, this is especially dangerous because the same agent that reads the skill may also gain access to the environment and can then perform irreversible on-chain actions or exfiltrate the key if the surrounding system is compromised or prompt-injected.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The skill documents state-changing and destructive operations such as metadata updates, deletion, ownership transfer, and wallet changes without an explicit warning that these actions are irreversible or security-sensitive. In an agent-skill setting, this increases the chance that an autonomous or prompt-influenced agent invokes high-impact blockchain operations without human confirmation, potentially causing asset loss, ownership changes, or permanent metadata damage.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.