Documentation
How Sentrii works, how to scan targets, and what the results mean.
Getting Started
Sentrii is a threat investigation agent for Solana. Paste a suspicious link, upload a file, enter a GitHub repo URL, or check a wallet address — Sentrii runs a multi-layer analysis and returns a verdict with a full evidence receipt. You can follow up in the chat to dig deeper into any finding.
Scan Types
URL Scan
Check a suspicious link. The URL is checked against threat intelligence databases and screened for known malware, phishing, and scams. Optional deep mode opens the page in an isolated browser to inspect its behavior, detect credential harvesting, and optionally simulate wallet interactions.
File Malware Scan
Upload a file (up to 32 MB) to check if it contains malware. Sentrii computes the file fingerprint, queries threat databases, and optionally detonates the file in a sandbox to observe its behavior. Results include a verdict and behavioral analysis.
Repo Supply-Chain Scan
Analyze a GitHub repository or uploaded archive for malicious or vulnerable dependencies. Manifest files and lockfiles are extracted and cross-referenced against vulnerability databases and known malicious package intelligence. Optionally installs dependencies in an isolated environment to detect suspicious network egress during install.
Wallet & Transaction Scans
Inspect a Solana wallet for exposed token delegations, risky authority settings, or prior interactions with known malicious addresses. Preflight a transaction before signing — simulation detects drain patterns, unauthorized authority changes, and account closures.
URL Scan Modes
Normal — 2 credits
Checks the URL against threat intelligence feeds and URL reputation databases. Returns a verdict based on known threat signals. Fastest option — completes in seconds. Best for quick safety checks.
Deep — 10 credits
Everything in Normal, plus the URL is opened in an isolated browser. Sentrii navigates the page, monitors network requests, detects redirects, and injects decoy credentials to identify phishing attempts. Takes longer but reveals behavior that reputation checks alone cannot detect.
Wallet interaction — 15 credits
Everything in Deep, plus an ephemeral Solana wallet is injected into the browser session. This allows Sentrii to simulate wallet connection flows, detect unauthorized signature requests, and identify drain contracts trying to trick users into approving malicious transactions.
Browser follow-up — 0.5 credits
A lightweight re-check of a previously scanned URL. Opens the page in a browser again without re-running the full threat intelligence pass. Use this when you want fresh evidence without paying the full deep scan cost.
Verdicts
Every scan produces one of four verdicts:
Credits
Each scan type costs a different number of credits. New users receive 20 free credits on first login. When you run low, purchase more from the Account panel in the sidebar.
| Scan | Cost |
|---|---|
| URL Normal | 2 credits |
| URL Deep | 10 credits |
| URL Wallet interaction | 15 credits |
| URL Browser follow-up | 0.5 credits |
| File malware | 4 credits |
| Repo supply-chain | 6 credits |
| Wallet exposure | 3 credits |
| Transaction preflight | 5 credits |
| Pack | Price | Credits |
|---|---|---|
| Mini | $2 | 10 |
| Starter | $10 | 50 |
| Core | $20 | 100 |
| Desk | $50 | 250 |
Payments are processed on Solana mainnet. You can pay with SOL or USDC from the Account panel.
Common Workflows
Quick URL check
Paste a link and send with the default Normal mode. You will get a verdict in seconds. If the result is SUSPICIOUS or unclear, re-scan with Deep mode for a browser-based investigation.
Before connecting a wallet
Use Wallet interaction mode on the site URL. Sentrii will open the site in an isolated browser with an ephemeral wallet injected and simulate the connection flow. Any unauthorized signature requests or drain attempts will be flagged.
Before signing a transaction
Run a Transaction Preflight scan. Paste the raw transaction and Sentrii will simulate execution and flag any dangerous instructions — delegate changes, authority transfers, or account closures you did not expect.
Check a GitHub repo
Paste a GitHub repository URL or upload an archive. Sentrii extracts dependency manifests and lockfiles, then cross-references each dependency against vulnerability databases and malicious package intelligence. The scan report lists every risky dependency and suggests remediation.
Follow up on a scan
Each scan produces a chat thread. You can ask questions about the findings, request additional research, or run a browser follow-up to get fresh evidence on a URL. All chat history is preserved per scan and accessible from Scan History.
Open sandbox browser
After a deep scan, you can open the scanned page in an isolated sandbox browser to explore it yourself. Nothing is streamed to the AI. When you are done, return to the chat and use Continue with agent to merge your observations into the scan receipt.
Frequently Asked Questions
How do I scan a file?
Click the paperclip icon in the input area and select a file (up to 32 MB). Sentrii will upload and analyze it. You can also drag and drop files onto the input area.
How do I scan a GitHub repo?
Paste the GitHub repository URL (e.g., https://github.com/owner/repo) into the input. Sentrii will fetch the archive and extract dependency files. You can also upload a tar or zip archive directly.
How do I scan a wallet or transaction?
Type or paste a Solana wallet address or a base64-encoded transaction into the input. Sentrii will detect the type and run the appropriate analysis. If you need a specific scan type, you can describe what you want in the chat.
What is the network toggle for?
The network toggle switches between Mainnet and Devnet. Mainnet is the live Solana network. Devnet is for testing. Wallet and transaction scans will use the selected network for on-chain queries.
Can I cancel a scan?
Yes. Open Scan History in the sidebar and cancel a queued or running scan. Credits are refunded if the scan had not started processing.
What data is collected?
Scan targets (URLs, files, repos, wallet addresses) and results are stored for your receipt and chat history. See the Terms of Service and Privacy Policy for full details.
How do I report a wrong verdict?
Open the scan receipt and click the Report button. You can also contact support via the live chat on the Support page — have the scan ID ready.
What happens when I run out of credits?
Purchase more from the Account panel in the sidebar. Payments are processed on Solana mainnet via SOL or USDC.
Need Help?
Use the live chat on the Support page. Have the scan ID ready from Scan History for faster help.