Security Audit

solana-scanner

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

TRUSTED

Scanned about 1 month ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

solana-scanner received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 0 medium, and 1 low severity. Key findings include Node lockfile missing, Unsanitized user input in shell command.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

98%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Network Access

1 finding

Filesystem Write

1 finding

Shell Execution

1 finding

Dynamic Code

1 finding

Security Findings2

Severity	Finding	Layer	Location
HIGH	Unsanitized user input in shell command The `scripts/scan-token.sh` script directly interpolates the user-provided `MINT_ADDRESS` into `curl` commands and JSON payloads without proper sanitization. A malicious `MINT_ADDRESS` containing shell metacharacters (e.g., `'; rm -rf /;'`) could lead to arbitrary command execution on the host system. Similarly, unescaped characters in JSON payloads could lead to malformed requests or injection. Implement strict input validation for `MINT` to ensure it conforms to a valid Solana mint address format (e.g., a base58 string of specific length) before it is used in any shell commands or JSON payloads. Additionally, ensure that any user-controlled input used in URLs is properly URL-encoded, and any input used within JSON strings is properly JSON-escaped to prevent both shell injection and malformed JSON.	LLM	scripts/scan-token.sh:15
LOW	Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution.	Dependencies	skills/satoshi891102/solana-scanner/package.json

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/b10a40f07c735ee5.svg)](https://skillshield.io/report/b10a40f07c735ee5)