jupiter-swap-integration

Warn

Audited by Socket on Feb 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is functionally coherent with its stated purpose: it fetches quotes from Jupiter, requests Jupiter to build a base64 versioned transaction, and guides signing via the user's wallet and submission to Solana RPC. There are no obvious signs of hidden exfiltration, obfuscated code, hard-coded secrets, or use of suspicious domains. The primary security consideration is the standard trust boundary when using a remote transaction builder: integrators should validate returned transactions (inspect instructions and program IDs) before asking users to sign. Overall this appears benign for intended use, provided implementers add transaction validation and robust response handling.

Confidence: 33%Severity: 15%
Audit Metadata
Analyzed At
Feb 15, 2026, 08:59 PM
Package URL
pkg:socket/skills-sh/sanctifiedops%2Fsolana-skills%2Fjupiter-swap-integration%2F@c0ca4682cbf29fc00a58ac313d1d86fcbe853243