Skip to content

Community plugin: @prflght/sak-plugin — transaction firewall for SAK agents #575

Description

@4oko4ow

What is @prflght/sak-plugin?

A transparent safety layer for Solana Agent Kit agents. Wraps the SAK execution flow to intercept every transaction before it lands on-chain — no changes to agent code required.

npm: @prflght/sak-plugin
GitHub: https://github.com/prflght/prflght
Website: https://prflght.xyz

Integration (3 lines)

import { createPrflghtPlugin } from '@prflght/sak-plugin'

const agent = new SolanaAgentKit(wallet, RPC_URL, {})
  .use(TokenPlugin)
  .use(createPrflghtPlugin({ agentId, apiKey: process.env.PRFLGHT_API_KEY }))

What it does

Every SAK transaction goes through:

  1. Simulation — replays the tx against current chain state
  2. Policy check — validates against agent policy (notional limits, allowed programs, daily spend)
  3. Protocol health — checks live TVL health of target venue (Orca, Jupiter, Drift, Kamino, Raydium, and 7 more)
  4. Signed attestation — returns ed25519 attestation verified by the on-chain prflght program

If any check fails → FirewallDenyError is thrown, transaction never reaches the network.

Why this matters

SAK agents are increasingly used in production DeFi contexts. Without a safety layer:

  • Prompt injection can drain wallets
  • Misconfigured slippage can cause large losses
  • Unhealthy protocol interactions can result in stuck funds

prflght adds enforcement that operates independently of the LLM — the policy is stored on-chain and cannot be overridden by prompt manipulation.

On-chain program

Deployed on Solana mainnet: 3JxoMhdGbnGx4eTvZ9nagSBdoWu1okd1Sf5VA3eRyKfo

Happy to discuss adding this to the SAK plugin ecosystem or documentation.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions