@554/jupiter
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration for Solana token swaps and limit orders via Jupiter. It enforces a strict security model where the agent must provide all transaction details (amounts, USD value, price impact) to the user and obtain explicit consent before execution.
- [SAFE]: Network communications are limited to official Jupiter (lite-api.jup.ag) and Solana (api.mainnet-beta.solana.com) endpoints using the platform's standard proxied HTTP client. No unauthorized connections or data exfiltration behaviors were found.
- [SAFE]: The skill adheres to the principle of least privilege by delegating sensitive operations. It does not handle private keys or credentials; instead, it generates transaction payloads that must be signed by an independent wallet skill.
- [SAFE]: Indirect prompt injection risks are effectively mitigated. Ingestion points: User-provided token symbols and trade amounts. Boundary markers: The agent is instructed to display quotes and wait for mandatory user confirmation. Capability inventory: Tools to broadcast signed transactions to the Solana network. Sanitization: Token symbols are resolved against a hardcoded whitelist of mint addresses, and numeric inputs are strictly formatted before being sent to the API.
Audit Metadata