sanctum
Integrates with Sanctum SDK for liquid staking and LST swaps on Solana, enabling seamless DeFi operations and liquidity management.
Install this skill
Security score
The sanctum skill was audited on Jun 13, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 40 | `${SANCTUM_API_BASE}/lsts?apiKey=${API_KEY}` |
Template literal with variable interpolation in command context
| 245 | `${this.baseUrl}/lsts?apiKey=${this.apiKey}` |
Template literal with variable interpolation in command context
| 253 | `${this.baseUrl}/lsts/${mintOrSymbol}?apiKey=${this.apiKey}` |
Template literal with variable interpolation in command context
| 267 | const url = new URL(`${this.baseUrl}/swap/token/order`); |
Template literal with variable interpolation in command context
| 293 | const response = await fetch(`${this.baseUrl}/swap/token/execute`, { |
Template literal with variable interpolation in command context
| 336 | console.log(`Found ${lsts.length} LSTs`); |
Template literal with variable interpolation in command context
| 340 | console.log(`INF APY: ${inf.apy}%`); |
Template literal with variable interpolation in command context
| 529 | const url = new URL(`${sanctum.baseUrl}/swap/withdrawStake/order`); |
Template literal with variable interpolation in command context
| 567 | `${sanctum.baseUrl}/lsts/${lstMint}/apys?apiKey=${sanctum.apiKey}&limit=${limit}` |
Buffer.from base64 decode
| 288 | const txBuffer = Buffer.from(orderResponse.tx, 'base64'); |
External URL reference
| 31 | const SANCTUM_API_BASE = 'https://sanctum-api.ironforge.network'; |
External URL reference
| 115 | https://sanctum-api.ironforge.network |
External URL reference
| 234 | private baseUrl = 'https://sanctum-api.ironforge.network'; |
External URL reference
| 331 | const connection = new Connection('https://api.mainnet-beta.solana.com'); |
External URL reference
| 652 | - [Sanctum App](https://app.sanctum.so/) |
External URL reference
| 653 | - [Sanctum Docs](https://learn.sanctum.so/docs) |
External URL reference
| 654 | - [API Documentation](https://learn.sanctum.so/docs/for-developers/sanctum-api) |
External URL reference
| 656 | - [Discord](https://discord.gg/sanctum) |