Solana CLI for trading, prediction markets, defi and x402 payments

• Analyzed: May 11, 2026, 5:26 AM
• Findings: 1
• Version: 0.3.4
• Hash: c86e730378b6058b9203989ba1e414c277dcff431eceee52f7378c7edbda3fe9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes a comprehensive Solana CLI tool (@solana-compass/cli) for wallet management, trading, and DeFi operations. It features a well-documented security model including granular permissions, transaction limits, and allowlists, with explicit instructions in SKILL.md for the AI agent to avoid direct filesystem access to private keys (~/.sol/wallets/). The 'sol fetch' command for x402 payments is a specialized network tool, but its behavior is clearly aligned with the stated purpose of paying for web resources via blockchain, and no evidence of malicious intent or data exfiltration was found.