Scan Report
5 /100
solana-compression
Build with ZK Compression on Solana using Light Protocol. Use when creating compressed tokens, compressed PDAs, or integrating ZK compression into Solana programs. Covers compressed account model, state trees, validity proofs, and client integration with Helius/Photon RPC.
Pure documentation-only skill for ZK Compression on Solana; no executable code, scripts, or suspicious behavior detected.
Safe to install
No action needed. This skill is a legitimate developer reference for Light Protocol's ZK Compression SDK on Solana.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem operations; only markdown documentation files |
| Network | NONE | NONE | — | No network calls in code; URLs in documentation are examples pointing to legitim… |
| Shell | NONE | NONE | — | No shell scripts or subprocess calls; only documentation of npm/cargo install co… |
| Environment | NONE | NONE | — | No environment variable access; placeholder API keys in examples (YOUR_KEY) are … |
| Skill Invoke | NONE | NONE | — | No skill invocation capability |
| Clipboard | NONE | NONE | — | No clipboard operations |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database access; mentions Postgres only in context of running a local Photon … |
14 findings
Medium External URL 外部 URL
https://www.apache.org/licenses/ LICENSE.txt:3 Medium External URL 外部 URL
https://mainnet.helius-rpc.com?api-key=YOUR_KEY SKILL.md:56 Medium External URL 外部 URL
https://api.devnet.solana.com SKILL.md:289 Medium External URL 外部 URL
https://photon-devnet-snapshot.helius-rpc.com SKILL.md:295 Medium External URL 外部 URL
https://www.zkcompression.com/ SKILL.md:318 Medium External URL 外部 URL
https://www.helius.dev/blog/zero-knowledge-proofs-its-applications-on-solana SKILL.md:323 Medium External URL 外部 URL
https://mainnet.helius-rpc.com?api-key=YOUR_API_KEY references/client-integration.md:22 Medium External URL 外部 URL
https://devnet.helius-rpc.com?api-key=YOUR_API_KEY references/client-integration.md:25 Medium External URL 外部 URL
https://your-photon-instance.com references/client-integration.md:28 Medium External URL 外部 URL
https://solanakit.org references/client-integration.md:248 Medium External URL 外部 URL
https://devnet.helius-rpc.com?api-key=KEY references/client-integration.md:351 Medium External URL 外部 URL
https://www.zkcompression.com/compressed-pdas/guides/how-to-reinitialize-compressed-accounts references/compressed-accounts.md:184 Medium External URL 外部 URL
https://crates.io/crates/light-sdk references/compressed-pdas.md:63 Medium External URL 外部 URL
https://devnet.helius-rpc.com?api-key=YOUR_KEY references/compressed-tokens.md:34 File Tree
6 files · 60.2 KB · 2113 lines Markdown 5f · 1951L
Text 1f · 162L
├─
▾
references
│ ├─
client-integration.md
Markdown
│ ├─
compressed-accounts.md
Markdown
│ ├─
compressed-pdas.md
Markdown
│ └─
compressed-tokens.md
⚠
Markdown
├─
LICENSE.txt
Text
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation-only skill with no executable code
✓ All code examples are standard SDK usage for legitimate Solana ZK Compression (Light Protocol)
✓ Package manager commands (npm, cargo) are standard installation procedures documented in official SDK guides
✓ No hidden functionality, obfuscation, or suspicious patterns
✓ No credential harvesting, data exfiltration, or network exfiltration behavior
✓ References Apache 2.0 license (LICENSE.txt)
✓ URLs point exclusively to official Light Protocol, Helius, and Solana documentation and infrastructure
✓ API key placeholders in examples (YOUR_KEY, YOUR_API_KEY) are clearly labeled and not real credentials