Skip to main content

quicknode

Quicknode provides blockchain infrastructure for Solana, enabling low-latency RPC endpoints and real-time data streaming for developers.

Install this skill

or
0/100

Security score

The quicknode skill was audited on Jun 13, 2026 and we found 66 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 546

Template literal with variable interpolation in command context

SourceSKILL.md
546const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
low line 428

Fetch to external URL

SourceSKILL.md
428const response = await fetch("https://api.quicknode.com/ipfs/rest/v1/s3/put-object", {
low line 514

Fetch to external URL

SourceSKILL.md
514const res = await fetch("https://api.quicknode.com/v0/endpoints", {
low line 520

Fetch to external URL

SourceSKILL.md
520const usage = await fetch("https://api.quicknode.com/v0/usage/rpc", {
low line 557

Fetch to external URL

SourceSKILL.md
557const response = await x402Fetch("https://x402.quicknode.com/solana-mainnet", {
medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: Quicknode blockchain infrastructure for Solana — RPC endpoints, DAS API (Digital Asset Standard) for NFTs and compressed assets, Yellowstone gRPC streaming, Priority Fee API, Streams (rea
medium line 18

Webhook reference - potential data exfiltration

SourceSKILL.md
18- **Webhooks**: Event-driven blockchain notifications
medium line 383

Webhook reference - potential data exfiltration

SourceSKILL.md
3834. Configure destination (webhook, S3, PostgreSQL, Azure)
medium line 399

Webhook reference - potential data exfiltration

SourceSKILL.md
399### Streams vs Webhooks
medium line 401

Webhook reference - potential data exfiltration

SourceSKILL.md
401| Feature | Streams | Webhooks |
medium line 405

Webhook reference - potential data exfiltration

SourceSKILL.md
405| **Destinations** | Webhook, S3, Postgres, Azure, Snowflake | HTTP endpoint only |
medium line 409

Webhook reference - potential data exfiltration

SourceSKILL.md
409## Webhooks
medium line 413

Webhook reference - potential data exfiltration

SourceSKILL.md
413### Webhook Setup
medium line 415

Webhook reference - potential data exfiltration

SourceSKILL.md
415Create webhooks via the Quicknode dashboard or Admin API to receive notifications when specific on-chain events occur.
medium line 417

Webhook reference - potential data exfiltration

SourceSKILL.md
417See [resources/webhooks-reference.md](resources/webhooks-reference.md) for API examples and configuration.
medium line 597

Webhook reference - potential data exfiltration

SourceSKILL.md
597- Require explicit confirmation before creating Streams, Webhooks, or IPFS uploads
low line 675

Webhook reference - potential data exfiltration

SourceSKILL.md
675│ ├── webhooks-reference.md # Webhook configuration
low line 681

Webhook reference - potential data exfiltration

SourceSKILL.md
681│ └── streams-webhooks/ # Streams and webhook setup
low line 38

Access to .env file

SourceSKILL.md
38# .env file
low line 49

Access to .env file

SourceSKILL.md
49const rpc = createSolanaRpc(process.env.QUICKNODE_RPC_URL!);
low line 50

Access to .env file

SourceSKILL.md
50const rpcSubscriptions = createSolanaRpcSubscriptions(process.env.QUICKNODE_WSS_URL!);
low line 86

Access to .env file

SourceSKILL.md
86const rpc = createSolanaRpc(process.env.QUICKNODE_RPC_URL!);
low line 87

Access to .env file

SourceSKILL.md
87const rpcSubscriptions = createSolanaRpcSubscriptions(process.env.QUICKNODE_WSS_URL!);
low line 113

Access to .env file

SourceSKILL.md
113const connection = new Connection(process.env.QUICKNODE_RPC_URL!);
low line 134

Access to .env file

SourceSKILL.md
134const response = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 158

Access to .env file

SourceSKILL.md
158const response = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 177

Access to .env file

SourceSKILL.md
177const response = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 283

Access to .env file

SourceSKILL.md
283const response = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 313

Access to .env file

SourceSKILL.md
313const feeResponse = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 345

Access to .env file

SourceSKILL.md
345basePath: process.env.QUICKNODE_METIS_URL!,
low line 430

Access to .env file

SourceSKILL.md
430headers: { "x-api-key": process.env.QUICKNODE_API_KEY! },
low line 486

Access to .env file

SourceSKILL.md
486endpointUrl: process.env.QUICKNODE_RPC_URL!,
low line 511

Access to .env file

SourceSKILL.md
511const QN_API_KEY = process.env.QUICKNODE_API_KEY!;
low line 546

Access to .env file

SourceSKILL.md
546const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
low line 586

Access to .env file

SourceSKILL.md
586solana: new Core({ endpointUrl: process.env.QUICKNODE_SOL_RPC! }),
low line 587

Access to .env file

SourceSKILL.md
587ethereum: new Core({ endpointUrl: process.env.QUICKNODE_ETH_RPC! }),
low line 588

Access to .env file

SourceSKILL.md
588polygon: new Core({ endpointUrl: process.env.QUICKNODE_POLYGON_RPC! }),
low line 603

Access to .env file

SourceSKILL.md
603const response = await fetch(process.env.QUICKNODE_RPC_URL!, {
low line 30

External URL reference

SourceSKILL.md
301. Visit [quicknode.com/endpoints](https://www.quicknode.com/endpoints)
low line 39

External URL reference

SourceSKILL.md
39QUICKNODE_RPC_URL=https://your-endpoint.solana-mainnet.quiknode.pro/your-token/
low line 61

External URL reference

SourceSKILL.md
61https://{ENDPOINT_NAME}.solana-mainnet.quiknode.pro/{TOKEN}/
low line 72

External URL reference

SourceSKILL.md
72| Mainnet | `https://{name}.solana-mainnet.quiknode.pro/{token}/` |
low line 73

External URL reference

SourceSKILL.md
73| Devnet | `https://{name}.solana-devnet.quiknode.pro/{token}/` |
low line 216

External URL reference

SourceSKILL.md
216// HTTP: https://example.solana-mainnet.quiknode.pro/TOKEN/
low line 217

External URL reference

SourceSKILL.md
217// gRPC: https://example.solana-mainnet.quiknode.pro:10000
low line 219

External URL reference

SourceSKILL.md
219"https://example.solana-mainnet.quiknode.pro:10000",
low line 428

External URL reference

SourceSKILL.md
428const response = await fetch("https://api.quicknode.com/ipfs/rest/v1/s3/put-object", {
low line 435

External URL reference

SourceSKILL.md
435// Access via: https://quicknode.quicknode-ipfs.com/ipfs/{pin.cid}
low line 508

External URL reference

SourceSKILL.md
508All Admin API requests use the `x-api-key` header against `https://api.quicknode.com/v0/`.
low line 514

External URL reference

SourceSKILL.md
514const res = await fetch("https://api.quicknode.com/v0/endpoints", {
low line 520

External URL reference

SourceSKILL.md
520const usage = await fetch("https://api.quicknode.com/v0/usage/rpc", {
low line 557

External URL reference

SourceSKILL.md
557const response = await x402Fetch("https://x402.quicknode.com/solana-mainnet", {
low line 578

External URL reference

SourceSKILL.md
578Full list: [quicknode.com/chains](https://www.quicknode.com/chains)
low line 650

External URL reference

SourceSKILL.md
650- [Quicknode Documentation](https://www.quicknode.com/docs/)
low line 651

External URL reference

SourceSKILL.md
651- [Solana-Specific Docs](https://www.quicknode.com/docs/solana)
low line 652

External URL reference

SourceSKILL.md
652- [DAS API Reference](https://www.quicknode.com/docs/solana/solana-das-api)
low line 653

External URL reference

SourceSKILL.md
653- [Yellowstone gRPC](https://www.quicknode.com/docs/solana/yellowstone-grpc/overview)
low line 654

External URL reference

SourceSKILL.md
654- [Streams Docs](https://www.quicknode.com/docs/streams)
low line 655

External URL reference

SourceSKILL.md
655- [Quicknode SDK](https://www.quicknode.com/docs/quicknode-sdk)
low line 656

External URL reference

SourceSKILL.md
656- [Admin API](https://www.quicknode.com/docs/console-api)
low line 657

External URL reference

SourceSKILL.md
657- [Key-Value Store](https://www.quicknode.com/docs/key-value-store)
low line 658

External URL reference

SourceSKILL.md
658- [x402](https://x402.quicknode.com)
low line 659

External URL reference

SourceSKILL.md
659- [LLM-Optimized Docs (llms.txt)](https://www.quicknode.com/llms.txt)
low line 660

External URL reference

SourceSKILL.md
660- [Guides](https://www.quicknode.com/guides)
low line 661

External URL reference

SourceSKILL.md
661- [Marketplace](https://marketplace.quicknode.com/)
low line 662

External URL reference

SourceSKILL.md
662- [Sample Apps](https://www.quicknode.com/sample-app-library)
Scanned on Jun 13, 2026
View Security Dashboard
Installation guide →