sati-sdk
Enables the creation and management of on-chain AI agent identities and reputations using SATI on the Solana blockchain.
Install this skill
Security score
The sati-sdk skill was audited on May 26, 2026 and we found 24 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 265 | await cache.set(`feedback:${walletAddress}:${agentMint}`, prepared); |
Template literal with variable interpolation in command context
| 275 | const prepared = await cache.get(`feedback:${walletAddress}:${agentMint}`); |
Curl to non-GitHub URL
| 108 | curl -sf https://myagent.com/mcp > /dev/null && \ |
Fetch to external URL
| 299 | const { messageHex } = await fetch("/api/prepare-feedback", { |
Fetch to external URL
| 315 | await fetch("/api/submit-feedback", { |
Webhook reference - potential data exfiltration
| 386 | **Incremental sync (scoring providers):** There is no `sinceSlot` filter - Photon RPC does not support slot-range queries on compressed accounts. For incremental updates, track `item.raw.slotCreated` |
Webhook reference - potential data exfiltration
| 577 | > **Note:** EVM address links (from `linkEvmAddress`) are not queryable via REST API - they are stored as Anchor events only. Retrieving them requires a Solana transaction log indexer (Helius webhooks |
External URL reference
| 36 | "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1", |
External URL reference
| 39 | "image": "https://example.com/avatar.png", |
External URL reference
| 41 | "files": [{"uri": "https://example.com/avatar.png", "type": "image/png"}], |
External URL reference
| 47 | "endpoint": "https://myagent.com/mcp", |
External URL reference
| 55 | "endpoint": "https://myagent.com/.well-known/agent-card.json", |
External URL reference
| 108 | curl -sf https://myagent.com/mcp > /dev/null && \ |
External URL reference
| 118 |  |
External URL reference
| 124 | [Reputation](https://sati.cascade.fyi/agent/<YOUR_MINT>) |
External URL reference
| 164 | const builder = sati.createAgentBuilder("MyAgent", "AI assistant", "https://example.com/avatar.png"); |
External URL reference
| 166 | .setMCP("https://mcp.example.com", "2025-06-18", { tools: ["search"] }) |
External URL reference
| 167 | .setA2A("https://a2a.example.com/.well-known/agent-card.json") |
External URL reference
| 186 | image: "https://example.com/avatar.png", |
External URL reference
| 187 | services: [{ name: "MCP", endpoint: "https://mcp.example.com" }], |
External URL reference
| 222 | endpoint: "https://agent.example", // Endpoint reviewed (optional) |
External URL reference
| 444 | builder.setMCP("https://new-mcp.example.com"); |
External URL reference
| 584 | rpcUrl: "https://...", // Custom Solana RPC (optional) |
External URL reference
| 585 | photonRpcUrl: "https://...", // Photon/Helius RPC for Light Protocol queries (optional) |