jupiter-swap-integration
Warn
Audited by Socket on Feb 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is functionally coherent with its stated purpose: it fetches quotes from Jupiter, requests Jupiter to build a base64 versioned transaction, and guides signing via the user's wallet and submission to Solana RPC. There are no obvious signs of hidden exfiltration, obfuscated code, hard-coded secrets, or use of suspicious domains. The primary security consideration is the standard trust boundary when using a remote transaction builder: integrators should validate returned transactions (inspect instructions and program IDs) before asking users to sign. Overall this appears benign for intended use, provided implementers add transaction validation and robust response handling.
Confidence: 33%Severity: 15%
Audit Metadata