Solana Analytics Pro 专业Solana分析

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:02 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed Solana analysis guide with financial-risk caveats and no executable payload, credential access, persistence, or trade-execution authority.

Install only if you want Chinese-language Solana market analysis. Do not treat generated signals as personalized financial advice or let any agent execute trades from this skill without separate user confirmation and independent verification.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger scope is very broad: it activates for deep analysis, signal generation, portfolio management, risk assessment, and professional market reporting without clear limits. In an agent environment, this can cause over-invocation, inappropriate handling of sensitive financial contexts, and the generation of high-risk trading guidance in cases where a narrower or different skill should be used.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The skill content is written entirely in Chinese and its examples implicitly steer output toward Chinese without offering language negotiation. This can cause mismatches with user intent, reduce transparency for users who cannot read the output, and increase the chance that important risk disclosures or financial caveats are not understood.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The entire skill document is written in Chinese and provides no indication that other languages are supported or that the language is user-selectable. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The file presents concrete buy/sell rules, stop-loss settings, and target logic as actionable trading strategies without any visible disclaimer that they are educational only and not financial advice. In the context of a 'professional' Solana analytics skill, users may treat these signals as authoritative and act on them directly, increasing the risk of financial loss in a highly volatile market.

Natural-Language Policy Violations

Low

• Confidence: 97% confidence
• Finding: SQP-3 applies to all file types and covers language or locale policy violations. This file forces a single language for all readers and does not indicate user opt-in, multilingual support, or a documented reason that the content must be Chinese-only.

Static analysis

No suspicious patterns detected.