solana-kit-migration

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about Solana SDKs and contains concrete, specific instructions and API usages for creating keypair signers, building transfer transactions, signing them, and sending funds. Examples include Keypair → KeyPairSigner migration (createKeyPairSignerFromBytes), building/appending a transfer instruction (getTransferSolInstruction), signing/send flows (signTransactionMessageWithSigners, sendAndConfirmTransaction), and a high-level example using sendSol. These are direct crypto/blockchain transaction and signing operations (i.e., moving value), so it grants Direct Financial Execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:32 PM