Solana Sniper Architect

• Outcome: Review
• Latest audit: Sep 10, 2026 · 4:41 PM UTC
• Version: 1.0.0

Overview

This skill is openly about building Solana trading bots, but it pushes production-ready live trading code without enough guardrails for real-money risk.

Review carefully before installing. Use this only with devnet or paper trading until you add explicit live-trading confirmation, slippage and position limits, pinned dependencies, dependency auditing, and a dedicated low-value wallet key. Do not expose a primary wallet private key to generated bot code.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:14

Finding

Generated Projects Use Unpinned Security-Sensitive Dependencies

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 14-17
Vulnerability Type: T08: Insecure Dependencies
Risk Level: Medium

Complete Code Snippet:

markdown

When asked to build a bot, provide:
- A full `main.py` script.
- A `requirements.txt` file (must include `solana`, `solders`, `requests`, `python-dotenv`).
- A `.env` template.

Technical Analysis

The Skill requires generated trading projects to include four third-party Python packages but does not instruct the agent to pin reviewed versions, use package hashes, produce a lockfile, or verify package provenance. Consequently, generated requirements.txt files may resolve to mutable package releases selected at installation time.

This is a supply-chain risk rather than evidence that any named package is currently malicious. Its security significance is elevated because the generated software is intended to load a Solana wallet private key and submit financial transactions. Code in installed dependencies executes with the bot process's permissions and may access its environment variables, network connections, and transaction data.

Attack Path

1. The Skill generates a trading-bot project containing unpinned dependencies.
2. A user installs those dependencies from a package index without hash verification.
3. A required package or one of its transitive dependencies is compromised, maliciously updated, or replaced through an unsafe package source.
4. The malicious package executes during installation or when imported by the generated bot.
5. It reads the bot process's environment, including PRIVATE_KEY, or modifies transaction construction and submission.
6. The attacker can exfiltrate wallet credentials or manipulate financial transactions within the authority available to the bot.

Impact Assessment

Successful exploitation could execute arbitrary code with the operating-system privileges of the user running or installin ...[truncated 457 chars]

Remediation

View remediation

Remediation Suggestions

• Require exact, reviewed dependency versions rather than unconstrained package names.
• Generate and commit a lockfile that includes transitive dependency versions.
• Use cryptographic package hashes and install with pip install --require-hashes.
• Install only from explicitly trusted package indexes over authenticated HTTPS.
• Add automated dependency auditing and vulnerability scanning to the generated project.
• Regularly review and deliberately update pinned versions rather than resolving the newest releases automatically.
• Run the bot in an isolated, least-privilege environment with restricted filesystem and network access.
• Use a dedicated low-value trading wallet and avoid exposing broader credentials to the bot process.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill is explicitly designed to generate production-ready high-frequency Solana trading bots that can execute real-money swaps, yet it provides no built-in warnings, guardrails, simulation-first guidance, or acknowledgement of financial loss risk. In this context, the omission is safety-relevant because users may deploy code that trades live funds based on polling logic and priority-fee execution without understanding market, slippage, MEV, key-management, or operational risks.

Content

No source excerpt is available for this finding.