solana-security

Audit Solana programs for security vulnerabilities with a 5-step review process.

11|13|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/MetalLegBob/drfraudsworth --skill solana-security-metallegbob
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solana-security
Source: https://github.com/MetalLegBob/drfraudsworth/tree/main/.claude/skills/solana-skills-plugin
Command: npx skills add https://github.com/MetalLegBob/drfraudsworth --skill solana-security-metallegbob

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Solana programs (Anchor or native Rust) for security vulnerabilities. Use when reviewing smart contract security, finding exploits, analyzing attack vectors, performing security assessments, or when explicitly asked to audit, review security, check for bugs, or find vulnerabilities in Solana programs.

Core Features & Use Cases

  • Systematic security review framework for Solana programs, supporting both Anchor and native Rust implementations.
  • Stepwise vulnerability detection including account validation, PDA security, CPI safety, oracle checks, and pattern recognition.
  • Use Case: Security audits for DeFi protocols, NFT programs, governance contracts, and on-chain components.

Quick Start

Initiate the security audit by loading the target Solana program and applying the 5-step review process.

Frequently Asked Questions about solana-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solana program for security vulnerabilities?

You can audit Solana programs for security vulnerabilities by applying a structured 5-step review process covering account validation, PDA security, CPI safety, oracle checks, and pattern recognition to generate a formal report with prioritized findings.

What security checks are needed for Anchor programs on Solana?

Security checks for Anchor programs on Solana include account validation, PDA security, CPI safety, oracle checks, and pattern recognition, ensuring smart contracts, DeFi protocols, and on-chain components are free from exploits across development, testnet, and mainnet environments.

Can I use this audit process for both native Rust and Anchor Solana smart contracts?

Yes, the audit process supports both Anchor and native Rust Solana smart contracts, systematically analyzing DeFi protocols, NFT programs, and governance contracts to identify attack vectors and security risks across development, testnet, and mainnet environments.

What does a Solana smart contract security audit report include?

A Solana smart contract security audit report includes prioritized findings of identified vulnerabilities and actionable remediation guidance, generated after systematically reviewing account validation, CPI safety, and PDA security to mitigate exploit risks.

When should I perform a security audit on Solana DeFi protocols?

You should perform a security audit on Solana DeFi protocols during development, on testnet, and before mainnet deployment to identify attack vectors, verify account validation and CPI safety, and remediate vulnerabilities before on-chain execution.