Can this skill provide code fixes for vulnerabilities?

Yes, the skill identifies the specific vulnerable code lines and provides recommended secure implementation patterns and refactoring advice.

Does this work with the latest Solana versions?

Yes, it specifically checks for patterns relevant to modern Solana development, including checked sysvar functions introduced in version 1.8.1 and later.

Which Solana frameworks does this skill support?

It supports both native Solana programs written in Rust and programs built using the Anchor framework, providing specific patterns for each.

What critical vulnerabilities are included in the scan?

The scanner checks for Arbitrary CPI, Improper PDA Validation, Missing Ownership Checks, Missing Signer Checks, Sysvar Account Spoofing, and Improper Instruction Introspection.

Solana Vulnerability Scanner

Name: Solana Vulnerability Scanner
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Scans Solana and Anchor programs to identify and remediate critical security vulnerabilities including arbitrary CPI and improper PDA validation.

The Solana Vulnerability Scanner is a specialized security auditing tool designed for developers working with native Rust or the Anchor framework. It encodes deep domain expertise to detect six critical vulnerability patterns unique to Solana's account model, such as unauthorized cross-program invocations, account spoofing via improper PDA validation, and missing signer checks. Beyond simple detection, the skill provides actionable remediation strategies, vulnerable code identification, and integrated testing recommendations to ensure protocols are secure before deployment.

主な機能

01Provides automated account validation and CPI security sweeps

02Detects 6 critical Solana-specific vulnerability patterns

030 GitHub stars

04Generates detailed reports with location-specific remediation steps

05Integrates with Trail of Bits lints and Anchor testing workflows

06Supports both native Solana Rust and Anchor framework codebases

ユースケース

01Validating Program-Derived Address (PDA) implementations and seed constraints

02Performing pre-launch security assessments for Solana protocols

03Hardening cross-program invocation (CPI) logic against malicious programs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks solana-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill