Solana

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 0.1.2
• Hash: 1611cdd6f9ed9be6b51e2678ea53c8df26a5571310f8ed306fb8716dca751f11
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is classified as suspicious due to its inherent high-risk capabilities, specifically the handling of cryptocurrency private keys and the execution of irreversible financial transactions on the Solana blockchain (sending SOL/tokens, swapping, launching tokens). While these actions are aligned with the stated purpose of a 'Solana wallet operations' skill, they represent significant financial risk if misused or compromised. The `scripts/initialize.py` script creates and saves a `SOLANA_PRIVATE_KEY` to a local `.env` file, and `scripts/jup_swap.py`, `scripts/pumpfun.py`, and `scripts/wallet.py` all load and use this key to sign transactions. No evidence of intentional malicious behavior, data exfiltration to unauthorized endpoints, or prompt injection attempts in `SKILL.md` was found, but the nature of the operations warrants a 'suspicious' classification.