Does this skill support both Anchor and native Rust?

Yes, it includes specialized security patterns, checklists, and validation logic for both the Anchor framework and low-level native Rust Solana implementations.

What common Solana vulnerabilities does it check for?

It scans for missing signer checks, PDA substitution attacks, integer overflows/underflows, account confusion, arbitrary CPI targets, and improper account closing.

Can it generate a professional security report?

Yes, it produces a structured report featuring severity levels (Critical to Informational), specific code locations, exploit scenarios, and secure code recommendations.

Is it updated for 2025 Solana standards?

Yes, it incorporates modern practices such as Token-2022 extension handling, InitSpace derive usage, and integration with the Trident fuzzing framework.

Should I use this instead of a professional audit?

This skill is a powerful tool for internal reviews and pre-audit hardening, but it should complement, not replace, a final review by specialized blockchain security firms.

Solana Security Auditor

Name: Solana Security Auditor
Author: tenequm

bytenequm

•

セキュリティとテスト

Audits Solana programs for security vulnerabilities using a systematic review framework for Anchor and native Rust.

概要

The Solana Security Auditor skill provides a comprehensive 5-step framework for reviewing smart contracts on the Solana blockchain. It guides users through initial assessments, systematic account validation, vulnerability pattern detection, and architectural reviews to identify critical issues like PDA substitution, type cosplay, and integer overflows. Designed for both Anchor and native Rust implementations, it helps developers harden their code by generating structured security reports with severity-ranked findings and actionable remediation steps based on 2025 best practices.

主な機能

Pattern detection for common exploits like PDA substitution and type cosplay
Support for both Anchor and native Rust security validation
Systematic 5-step security review process for Solana programs
4 GitHub stars
Modern practices integration including Token-2022 and Trident fuzzing
Automated security report generation with severity-ranked findings

ユースケース

Generating structured vulnerability reports with proof-of-concept exploit scenarios
Performing a pre-deployment security audit on an Anchor-based DeFi protocol
Identifying missing signer or ownership validations in native Rust programs

概要

主な機能

Pattern detection for common exploits like PDA substitution and type cosplay
Support for both Anchor and native Rust security validation
Systematic 5-step security review process for Solana programs
4 GitHub stars
Modern practices integration including Token-2022 and Trident fuzzing
Automated security report generation with severity-ranked findings

ユースケース

Generating structured vulnerability reports with proof-of-concept exploit scenarios
Performing a pre-deployment security audit on an Anchor-based DeFi protocol
Identifying missing signer or ownership validations in native Rust programs