Solana Swaps

Swap tokens on Solana via Jupiter aggregator and check wallet balances. Use when user wants to swap tokens, check SOL/token balance, or get swap quotes.

What to check before installing or enabling this skill: - Missing pieces: SKILL.md references a local Node script (scripts/jupiter-swap.mjs) but the skill bundle contains no code files. Ask the publisher for the missing script or an install spec before trusting/using this skill — without it the instructions are incomplete. - Undeclared API key: The documentation uses JUPITER_API_KEY for authenticated Jupiter requests but the skill metadata does not declare it as a required env var. Confirm where that key is expected to come from and ensure it is stored securely. - High-sensitivity credential: SOLANA_KEYPAIR_PATH points to your wallet keypair file. Any code run with that keypair can sign and submit transactions (i.e., move funds). Only provide that path to code and scripts you have audited and trust. Prefer a limited-purpose hot wallet with minimal funds, a hardware wallet, or signing via a remote signer you control. - Missing audit: Because the skill is instruction-only and references external APIs and a missing script, you should inspect the jupiter-swap.mjs code (or request it) to confirm it does not exfiltrate the keypair file, upload private data, or call unexpected endpoints. - Network calls: The skill interacts with api.jup.ag (expected) but also uses curl and writes /tmp files. Ensure temporary files don't contain private key data and that your environment prevents accidental leakage (e.g., logs). If you cannot obtain and review the missing script and a clear declaration of required env vars, treat this skill as untrusted and avoid supplying your wallet keypair path or API keys.

Type: OpenClaw Skill Name: solana-swaps Version: 0.1.0 The skill is designed to perform Solana token swaps, which inherently requires access to the user's private key via `SOLANA_KEYPAIR_PATH` for transaction signing. While the `SKILL.md` file contains strong safety instructions for the AI agent, explicitly forbidding private key exfiltration ('NEVER log, display, or transmit private key contents') and mandating user confirmation for all swaps, a critical component, `scripts/jupiter-swap.mjs`, is invoked with the keypair but its content is not provided for analysis. This unverified component, which directly handles the private key for signing and submitting transactions, introduces a significant blind spot and makes the skill suspicious despite the otherwise robust safety guidelines in `SKILL.md`.