Does this skill support both Anchor and native Rust?

Yes, it includes specialized security patterns, checklists, and validation logic for both the Anchor framework and low-level native Rust Solana implementations.

What common Solana vulnerabilities does it check for?

It scans for missing signer checks, PDA substitution attacks, integer overflows/underflows, account confusion, arbitrary CPI targets, and improper account closing.

Can it generate a professional security report?

Yes, it produces a structured report featuring severity levels (Critical to Informational), specific code locations, exploit scenarios, and secure code recommendations.

Is it updated for 2025 Solana standards?

Yes, it incorporates modern practices such as Token-2022 extension handling, InitSpace derive usage, and integration with the Trident fuzzing framework.

Should I use this instead of a professional audit?

This skill is a powerful tool for internal reviews and pre-audit hardening, but it should complement, not replace, a final review by specialized blockchain security firms.

Solana Security Auditor

Name: Solana Security Auditor
Author: tenequm

bytenequm

•

Security & Testing

Audits Solana programs for security vulnerabilities using a systematic review framework for Anchor and native Rust.

The Solana Security Auditor skill provides a comprehensive 5-step framework for reviewing smart contracts on the Solana blockchain. It guides users through initial assessments, systematic account validation, vulnerability pattern detection, and architectural reviews to identify critical issues like PDA substitution, type cosplay, and integer overflows. Designed for both Anchor and native Rust implementations, it helps developers harden their code by generating structured security reports with severity-ranked findings and actionable remediation steps based on 2025 best practices.

Key Features

01Pattern detection for common exploits like PDA substitution and type cosplay

02Support for both Anchor and native Rust security validation

03Systematic 5-step security review process for Solana programs

044 GitHub stars

05Modern practices integration including Token-2022 and Trident fuzzing

06Automated security report generation with severity-ranked findings

Use Cases

01Generating structured vulnerability reports with proof-of-concept exploit scenarios

02Performing a pre-deployment security audit on an Anchor-based DeFi protocol

03Identifying missing signer or ownership validations in native Rust programs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add tenequm/claude-plugins solana-security

For use in Claude.ai and ChatGPT

Download Skill