qedgen-auditor

Audit Solana programs for vulnerabilities with reproducible proofs and skeleton specs.

67|7|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/QEDGen/solana-skills --skill qedgen-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: qedgen-auditor
Source: https://github.com/QEDGen/solana-skills/tree/main/skills/qedgen-auditor
Command: npx skills add https://github.com/QEDGen/solana-skills --skill qedgen-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Auditors need a structured, repeatable workflow to discover real vulnerabilities in Solana programs and to generate reproducible proofs and guidance.

Core Features & Use Cases

  • Phase 1 autonomous vulnerability discovery through codebase reads and repro emission.
  • Repro generation and spec handoff to enable phase-2 ratification and artifact creation.
  • Output a ranked digest with reproducible probes, skeleton spec, and codegen-ready artifacts.

Quick Start

Run qedgen-auditor against a Solana program repository to initiate Phase 1 discovery.

Frequently Asked Questions about qedgen-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solana program for security vulnerabilities?

Auditing a Solana program for vulnerabilities involves applying a structured workflow that blends spec discovery with reproducible proofs across Anchor, native Rust, and codegen targets to output documented findings and remediation specs.

What is the best way to find reproducible vulnerabilities in Rust programs?

Finding reproducible vulnerabilities in Rust programs requires a structured audit workflow that emits ranked digests with reproducible probes and codegen-ready artifacts for phase-2 ratification and remediation.

Can I use an automated workflow to discover Anchor program vulnerabilities?

Yes, automated vulnerability discovery for Anchor programs operates in an initial phase that reads the codebase and emits repros, followed by user interviews and refined repros to finalize the audit.

How does a security audit workflow generate remediation specs for Solana?

A security audit workflow generates remediation specs by conducting autonomous discovery and user interviews, then outputting a skeleton specification alongside ranked findings and reproducible proofs for Solana programs.

Does the Solana vulnerability discovery process support native Rust programs?

Yes, the Solana vulnerability discovery process explicitly targets native Rust programs, Anchor programs, and codegen targets to identify real vulnerabilities and produce documented repros.