Security audit
Security checks for vulnerabilities and agentic risk
This skill needs review because a modified mission work file can trigger commands, and startup instructions can automatically refund other missions.
Before running this skill, have the unsafe work-file handling fixed and make recovery of other missions require explicit approval. Use a dedicated wallet with limited funds and upload only intended media to a verified storage destination. All four documents were inspected; the separate signing server's claimed protections remain unverified.
The command performs a general wallet-funding operation on Solana devnet. The supplied chunk contains no mission identifier, escrow interaction, or other evidence tying that operation to SoloMission, while the description explicitly excludes unrelated Solana wallet work.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
whatever file that path names, so pass only the file you mean to publish. It then sends the
bytes to the signed URL and the metadata above to the API. The path and the file name go to
neither; the path appears only in the server's local error if the file can't be read. The
raw REST flow is the same: `curl --data-binary @"$FILE"` reads the file locally and PUTs only
its bytes.
- **Keypair files.** The MCP server reads them locally to sign. Only public addresses and
signed transactions leave the machine; never a private key, keypair file or passphrase.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
echo "SOLO_AGENT_KEY is not set."
else
CODE=$(curl -s -o /dev/null -w '%{http_code}' \
"https://api.mission.projectsolo.ai/agent/missions?limit=1" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
[ "$CODE" = "200" ] && echo "Agent key valid." || echo "Agent key rejected (HTTP $CODE)."
fi
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
> https://solomission.ai/agents/manage, or register from your own terminal:
>
> ```
> curl -s -X POST https://api.mission.projectsolo.ai/agent/register \
> -H "Content-Type: application/json" \
> -d "$(jq -n --arg n 'your-agent-name' '{name: $n}')" | jq '{agent_id, api_key}'
> ```
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
PAGE=1
while true; do
RESULT=$(curl -s "https://api.mission.projectsolo.ai/agent/missions?limit=100&page=%24PAGE" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
# Flagged by reconciler
echo $RESULT | jq '.missions[] | select(.requires_sponsor_action != null) | {mission_id, requires_sponsor_action}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
budget field)MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "coffee_chat",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
solo-mission-mcp create_mission tool sends it for you whenever budget is set.)
MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "general",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# One get_mission call covers all participants; average_rating is on the participant object
MISSION=$(curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
PROCESSED=$(jq -r '.processed_uids[]' "$STATE_FILE")
MIN_RATING=$(jq -r '.config.min_rater_rating' "$STATE_FILE")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
jq --arg uid "$UID" '.hired_uids += [$uid] | .processed_uids += [$uid]' \
"$STATE_FILE" | _write_state
else
curl -s -X POST "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/participants/$UID/reject" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d "$(jq -n '{reason: "Thank you for applying. We are looking for raters with a higher platform rating."}')"
jq --arg uid "$UID" '.processed_uids += [$uid]' "$STATE_FILE" | _write_state
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
local QS=""
[ -n "$LAST" ] && QS="?since=$(jq -rn --arg v "$LAST" '$v | @uri')"
MSGS=$(curl -s "https://api.mission.projectsolo.ai/agent/conversations/$CONV_ID/messages$QS" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
local HUMAN_COUNT
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Finalizing freezes who qualified, so wait until every hired participant is done:
# media_review sets review_progress.completed_at, a response_schema mission sets
# submission.completed_at, and for manual missions you add them to qualified_uids.
MISSION=$(curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
ALL_DONE=$(echo "$MISSION" | jq --argjson q "$(jq -c '.qualified_uids' "$STATE_FILE")" '
[.participants[] | select(.status == "hired")] as $h
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Step 1 — Fetch tracks
TRACKS=$(curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/tracks" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
TOTAL_VOTES=$(echo $TRACKS | jq '[.tracks[].vote_counts.total] | add // 0')
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
jq -r '.watched_conversations[]' "$STATE_FILE" | while read -r CONV_ID; do
curl -s -X POST "https://api.mission.projectsolo.ai/agent/conversations/$CONV_ID/close" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" -d '{}'
done
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Off-chain (no escrow, manual payment):
MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "media_review",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
On-chain (Solana escrow, automated payout; "chain": "solana" is the default for paid
missions, sent explicitly here):
MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "media_review",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
BODY=$(jq -n --arg title "$TITLE" --arg d "$DURATION" \
'{title: $title} + (if $d == "" then {} else {duration_seconds: ($d | tonumber)} end)') || return 1
curl -s -X POST \
"https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/tracks/$TRACK_ID/confirm" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d "$BODY"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Poll get_mission to track completion per participant:
curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" \
| jq '.participants[] | {uid, status, rated: .review_progress.rated_track_ids | length, done: (.review_progress.completed_at != null)}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Check item scores at any time:
curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/tracks" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" \
| jq '.tracks[] | {title, vote_counts}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
vote_counts gives a {1,2,3,4,5,total} star distribution. For richer analysis,
get per-participant engagement:
curl -s "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/tracks/$TRACK_ID/ratings" \
-H "X-Agent-Key: $SOLO_AGENT_KEY"
# → [{uid, rating, comment, total_listen_seconds, rated_at}]
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
It auto-qualifies every hired participant whose review_progress.completed_at is set.
curl -s -X POST "https://api.mission.projectsolo.ai/agent/missions/$MISSION_ID/finalize-qualification" \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
None of these read or print key material:
CFG=$(curl -s https://api.mission.projectsolo.ai/agent/solana/config)
MINT=$(echo "$CFG" | jq -r '.mints.USDC')
# Don't take the program or the RPC endpoint from the API you are checking: pin them, as the
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
PAGE=1
while true; do
RESULT=$(curl -s "https://api.mission.projectsolo.ai/agent/missions?limit=100&page=%24PAGE" \
-H "X-Agent-Key: $SOLO_AGENT_KEY")
echo "$RESULT" | jq '.missions[] | select(.requires_sponsor_action != null) | {id: .mission_id, action: .requires_sponsor_action}'
# Also catch expired on-chain missions the background job hasn't flagged yet
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
> https://solomission.ai/agents/manage, or register from your own terminal:
>
> ```
> curl -s -X POST https://api.mission.projectsolo.ai/agent/register \
> -H "Content-Type: application/json" \
> -d "$(jq -n --arg n 'your-agent-name' '{name: $n}')" | jq '{agent_id, api_key}'
> ```
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
budget field)MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "coffee_chat",
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
solo-mission-mcp create_mission tool sends it for you whenever budget is set.)
MISSION=$(curl -s -X POST https://api.mission.projectsolo.ai/agent/missions \
-H "X-Agent-Key: $SOLO_AGENT_KEY" -H "Content-Type: application/json" \
-d '{
"type": "general",