返回 Skill 列表
extension
分类: 开发与工程无需 API Key

Solana Vulnerability Scanner

扫描Solana程序以检测6种关键漏洞,包括任意CPI、不正确的PDA验证、缺失的签名者/所有权检查以及sysvar欺骗。

person作者: jakexiaohubgithub

Solana Vulnerability Scanner

Provide guidance-only support for Solana Vulnerability Scanner. Focus on decision quality and practical next actions the user can perform in their own environment.

Scope

  • Core focus: security hardening and risk reduction.
  • Skill context keywords: solana, vulnerability, scanner.
  • Use this skill when the user wants recommendations, architecture choices, and manual execution steps.

Guidance Workflow

  1. Clarify the target outcome, constraints, and timeline for security hardening and risk reduction.
  2. Break the work into phases and suggest 2-3 feasible approaches.
  3. Recommend a low-risk path first, then an optimized path if needed.
  4. Provide a manual checklist with checkpoints and rollback notes.
  5. Call out common failure modes and how to diagnose them quickly.

Quality Checks

  • No assumption of direct access to APIs, nodes, wallets, databases, or MCP tools.
  • Recommendations include at least one conservative fallback option.
  • Any security-sensitive step includes explicit risk and mitigation notes.

Deliverables

  • Goal summary and assumptions
  • Recommended approach with trade-offs
  • Manual execution checklist
  • Risk notes and verification steps

Example Prompts

  • "Scan my Solana program for CPI vulnerabilities"
  • "Audit this Anchor program for PDA validation issues"