Back to skills
extension
Category: Development & EngineeringNo API key required

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.

personAuthor: jakexiaohubgithub

Solana Vulnerability Scanner

Provide guidance-only support for Solana Vulnerability Scanner. Focus on decision quality and practical next actions the user can perform in their own environment.

Scope

  • Core focus: security hardening and risk reduction.
  • Skill context keywords: solana, vulnerability, scanner.
  • Use this skill when the user wants recommendations, architecture choices, and manual execution steps.

Guidance Workflow

  1. Clarify the target outcome, constraints, and timeline for security hardening and risk reduction.
  2. Break the work into phases and suggest 2-3 feasible approaches.
  3. Recommend a low-risk path first, then an optimized path if needed.
  4. Provide a manual checklist with checkpoints and rollback notes.
  5. Call out common failure modes and how to diagnose them quickly.

Quality Checks

  • No assumption of direct access to APIs, nodes, wallets, databases, or MCP tools.
  • Recommendations include at least one conservative fallback option.
  • Any security-sensitive step includes explicit risk and mitigation notes.

Deliverables

  • Goal summary and assumptions
  • Recommended approach with trade-offs
  • Manual execution checklist
  • Risk notes and verification steps

Example Prompts

  • "Scan my Solana program for CPI vulnerabilities"
  • "Audit this Anchor program for PDA validation issues"