Security audit
Solana Batch Payments
Security checks across malware telemetry and agentic risk
Overview
The skill is a clearly disclosed Solana batch-payment helper with expected financial risk but no artifact-backed hidden or malicious behavior.
Install only if you are comfortable using a third-party gateway to construct unsigned Solana transactions. Before signing, verify the response came from the intended request, inspect recipients, amounts, network, fees, and token mints, use devnet or small tests first, and do not provide a wallet keypair unless you intentionally want the helper to sign and submit those transactions locally.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.