Solana Program Security Scanner

Name: Solana Program Security Scanner
Availability: InStock
Author: SHASHI

Scan Solana programs for security vulnerabilities and misconfigurations.

56|9|Updated Jan 25, 2026

Search Tags:#security #audit #native #anchor #solana #cpi

Ready to run

npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill solana-program-security-scanner

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Solana Program Security Scanner
Source: https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/tree/main/skills/solana-scanner
Command: npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill solana-program-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Solana Program Security Scanner helps developers and auditors quickly identify security vulnerabilities in Solana programs (Anchor-based and native) by outlining known patterns, recommended mitigations, and practical checklists.

Core Features & Use Cases

Provides comprehensive vulnerability patterns, CPI safety considerations, and Solana-specific risk vectors (owner checks, PDA derivations, Token-2022 handling, and oracle interactions).
Supplies actionable remediation guidance, reference materials, and workflow templates for both Anchor and native Solana audits.
Useful for security reviews of DeFi protocols, NFT programs, and on-chain tooling that interact with Solana programs.

Quick Start

Run an initial security scan of a Solana program and generate a structured report with actionable findings.

Frequently Asked Questions about Solana Program Security Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit a Solana program for security vulnerabilities?▼

To audit a Solana program for security vulnerabilities, you can scan it using structured patterns that identify account validation, CPI safety, PDA handling, and oracle interaction risks. The scanner outputs actionable findings and remediation guidance for Anchor and native programs.

What are common security vulnerabilities in Anchor programs?▼

Common security vulnerabilities in Anchor programs include missing owner checks, incorrect PDA derivations, unsafe CPI interactions, and improper Token-2022 extension handling. The scanner identifies these risk vectors and supplies mitigation checklists.

Can I use this scanner for native Solana programs or is it only for Anchor?▼

You can use this scanner for both native Solana programs and Anchor-based programs. It provides tailored workflow templates and vulnerability patterns suited to each framework's architecture.

How does CPI safety work in Solana security audits?▼

CPI safety in Solana security audits involves verifying cross-program invocations validate account owners and signers before executing sensitive instructions. The scanner outlines these CPI considerations to prevent unauthorized access.

What is the best way to check PDA derivations in a Solana audit?▼

The best way to check PDA derivations in a Solana audit is to systematically verify canonical bumps and seed combinations against expected program logic. The scanner provides structured checklists to identify PDA misconfigurations.

Does this Solana security scanner support Token-2022 extensions?▼

Yes, this Solana security scanner supports Token-2022 extensions by identifying specific risk vectors and security misconfigurations related to token extensions. It provides practical checklists for handling these interactions.