skills.rest
workersio
workersioOFFICIAL
Explore all skills by this author →
Website𝕏@workersioGitHub

solana-audit

Identify and score security vulnerabilities in Solana programs using a multi-phase audit workflow.

155|24|Updated Feb 14, 2026
Search Tags:#security#vulnerability#audit#pda#anchor#solana#cpi
One-click install
npx skills add https://github.com/workersio/spec --skill solana-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: solana-audit
Source: https://github.com/workersio/spec/tree/main/plugins/solana-audit/skills/solana-audit
Command: npx skills add https://github.com/workersio/spec --skill solana-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a structured, end-to-end security audit framework for Solana programs, enabling teams to identify, quantify, and remediate vulnerabilities across authentication, account management, cross-program invocation, arithmetic safety, logic and economics, token usage, and deployment concerns.

Core Features & Use Cases

  • Automated multi-category vulnerability scanning using a provenance-driven taxonomy, scoring, and risk prioritization.
  • Phase-driven workflow with exploration, parallel scanning, falsification, and reporting to produce a formal audit report.
  • Reference-guided remediation guidance and framework-specific fixes for Anchor and Native Solana programs.

Quick Start

Run a Solana program audit by pointing this skill at your workspace root to generate a comprehensive security report.

Frequently Asked Questions about solana-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solana program for security vulnerabilities?▼

To audit a Solana program, you scan the source code using a multi-phase workflow that identifies and scores vulnerabilities across authentication, account management, and CPI to produce a formal report.

Does this security audit workflow support Anchor and Pinocchio frameworks?▼

Yes, the security audit workflow applies to Rust-based Solana programs, explicitly supporting both Anchor and Pinocchio frameworks to provide framework-specific remediation guidance.

What is the process for scoring vulnerabilities in Solana smart contracts?▼

Scoring vulnerabilities in Solana smart contracts involves applying audit scoring rules and a provenance-driven taxonomy during a parallel scanning phase to quantify and prioritize risks.

How do I check my Solana program for cross-program invocation and PDA vulnerabilities?▼

Checking for CPI and PDA vulnerabilities involves scanning your Solana program source against a vulnerability taxonomy that categorizes cross-program invocation and account management security flaws.

What are the limitations of automated Solana security audits?▼

Automated Solana security audits require program source access and a vulnerability taxonomy reference, meaning they analyze code statically and may need manual falsification to confirm logic and economic flaws.

Can I generate a formal audit report for Rust-based on-chain programs?▼

Yes, you can generate a formal audit report for Rust-based on-chain programs by running a phase-driven workflow that concludes with reporting after exploration, scanning, and falsification.

Related Skills

Explore More Software Engineering Skills→
ladinglogichqladinglogichq

solana-vulnerability-scanner

Scan Solana Rust and Anchor programs for six critical vulnerability patterns.

Official
Advanced
hongmaple0820hongmaple0820
9

solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana and Anchor programs.

Community
Advanced
iiammaeiiammae

solana-vulnerability-scanner

Detect security vulnerabilities in Solana programs using Rust and Anchor.

Community
Advanced
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced