Security audit
Security checks across malware telemetry and agentic risk
This skill does what it says, but it gives an agent real Solana spending authority with weak safeguards and some misleading token-launch guidance.
Review carefully before installing. Use only a new low-balance wallet, test on devnet first, avoid giving an autonomous agent a valuable private key, manually verify every recipient, amount, token mint, swap route, fee, and network before broadcasting, and do not use the vanity-address guidance to imply authenticity, endorsement, or safety.
def get_keypair() -> Keypair:
"""Load keypair from environment variable."""
private_key = os.environ.get("SOLANA_PRIVATE_KEY")
if not private_key:
print("Error: SOLANA_PRIVATE_KEY environment variable not set.")#!/usr/bin/env python3 """ Solana Wallet Initialization Creates a new wallet and saves the private key to .env file """ import os
def save_to_env(private_key_base58: str, env_path: Path = None):
"""Save private key to .env file."""
if env_path is None:
env_path = Path.cwd() / ".env"def save_to_env(private_key_base58: str, env_path: Path = None):
"""Save private key to .env file."""
if env_path is None:
env_path = Path.cwd() / ".env"
env_content = {}# Update or add SOLANA_PRIVATE_KEY
env_content["SOLANA_PRIVATE_KEY"] = private_key_base58
# Write back to .env
with open(env_path, "w") as f:
for key, value in env_content.items():
f.write(f"{key}={value}\n")private_key_bytes = bytes(keypair)
private_key_base58 = base58.b58encode(private_key_bytes).decode("utf-8")
# Save to .env
saved_path = save_to_env(private_key_base58, env_path)
print("✅ New wallet created!\n")print()
print("To use the wallet, export the private key to your environment:")
print()
print(" export SOLANA_PRIVATE_KEY=$(grep SOLANA_PRIVATE_KEY .env | cut -d '=' -f2)")
print()
print("Or source the .env file:")
print()print()
print(" export SOLANA_PRIVATE_KEY=$(grep SOLANA_PRIVATE_KEY .env | cut -d '=' -f2)")
print()
print("Or source the .env file:")
print()
print(" source .env")
print()solana>=0.34.0 solders>=0.21.0 base58>=2.1.0 python-dotenv>=1.0.0
solana>=0.34.0 solders>=0.21.0 base58>=2.1.0 python-dotenv>=1.0.0 aiohttp>=3.9.0
solana>=0.34.0 solders>=0.21.0 base58>=2.1.0 python-dotenv>=1.0.0 aiohttp>=3.9.0
solana>=0.34.0 solders>=0.21.0 base58>=2.1.0 python-dotenv>=1.0.0 aiohttp>=3.9.0
solders>=0.21.0 base58>=2.1.0 python-dotenv>=1.0.0 aiohttp>=3.9.0
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.