instruction-introspection

Detect instruction introspection usage and sysvar validation gaps in Solana programs.

276|56|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill instruction-introspection
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: instruction-introspection
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/solana/instruction-introspection
Command: npx skills add https://github.com/PlamenTSV/plamen --skill instruction-introspection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detects and documents usage of instruction introspection in Solana programs to identify potential security risks and manipulation points.

Core Features & Use Cases

  • Inventory and map instruction introspection usage (e.g., load_instruction_at, get_instruction_relative) and associated sources.
  • Validate sysvar address checks to prevent sysvar spoofing and ensure correct program interactions.
  • Provide actionable findings with guidelines for defense, including program ID verification and safe invocation patterns.

Quick Start

Scan the target Solana program for instruction introspection usage and report findings with recommended defenses.

Frequently Asked Questions about instruction-introspection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect instruction introspection vulnerabilities in Solana programs?

Detect instruction introspection vulnerabilities by scanning Solana programs for sysvar validation gaps and sequence risks. Identify usage of load_instruction_at and get_instruction_relative to map manipulation points and ensure program ID verification.

What is instruction introspection in Solana smart contract security?

Instruction introspection in Solana smart contract security is the process of analyzing how programs read instruction data. Auditing this mechanism ensures sysvar address validation and prevents sysvar spoofing during program interactions.

How do I audit Solana programs for sysvar spoofing risks?

Audit Solana programs for sysvar spoofing risks by validating sysvar address checks and verifying program IDs. Documenting instruction introspection usage helps identify sequence risks and prevents incorrect program interactions.

Can I use instruction introspection to find sequence risks in Solana audits?

Yes, you can use instruction introspection analysis to find sequence risks in Solana audits. Scanning for checked function usage and sysvar address validation exposes potential manipulation points and ensures safe invocation patterns.

What is the best way to map introspection sources during a Solana security audit?

The best way to map introspection sources during a Solana security audit is to inventory functions like get_instruction_relative. Applying this across audit scenarios detects validation gaps and provides actionable defense guidelines.

Why does sysvar address validation matter for Solana program security?

Sysvar address validation matters for Solana program security because it prevents sysvar spoofing. Checking instruction introspection usage ensures correct program interactions and verifies that safe invocation patterns are followed.