skills.rest
Superlend
SuperlendOFFICIAL
Explore all skills by this author →
Website𝕏@SuperlendHQGitHub

solana-vulnerability-scanner

Detect six critical security vulnerabilities in Solana programs and Anchor contracts.

Updated Jul 10, 2025
Search Tags:#security#auditing#pda#anchor#solana#cpi
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill solana-vulnerability-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/building-secure-contracts/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill solana-vulnerability-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security reviewers and developers identify six critical vulnerability patterns in Solana programs, enabling faster secure-by-default audits.

Core Features & Use Cases

  • Six vulnerability patterns: Arbitrary CPI, Improper PDA validation, Missing ownership check, Missing signer check, Sysvar account spoofing, and Improper instruction introspection.
  • Platform coverage: Works with native Solana programs and Anchor-based contracts during security reviews and pre-launch audits.
  • Use Case: During a security assessment of a Solana project, run this skill to surface high-risk patterns and generate actionable remediation guidance.

Quick Start

Run the vulnerability scanner against your Solana project to identify the six critical patterns and generate a remediation plan.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solana programs for common security vulnerabilities like arbitrary CPI and PDA validation?▼

To audit Solana programs for arbitrary CPI and improper PDA validation, run a vulnerability scanner designed to detect these six critical security gaps and generate actionable remediation guidance.

What is sysvar account spoofing and how do I detect it in Anchor-based contracts?▼

Sysvar account spoofing is a critical vulnerability where attackers pass fake sysvar accounts; you detect it in Anchor-based contracts by scanning instruction logic for missing sysvar verification patterns.

Does the Solana vulnerability scanner work with both native programs and Anchor contracts?▼

Yes, the Solana vulnerability scanner works with both native Solana programs and Anchor-based contracts to identify missing ownership checks and other security gaps during pre-launch audits.

How do I check my Solana code for missing signer checks and improper instruction introspection?▼

Check your Solana code for missing signer checks and improper instruction introspection by running an automated vulnerability assessment that surfaces these high-risk patterns and provides safe practice guidance.

What is the best way to find missing ownership checks during a pre-launch Solana security review?▼

The best way to find missing ownership checks during a pre-launch Solana security review is to scan the program for patterns where account managers are not verified against expected program owners.

Related Skills

Explore More Software Engineering Skills→
hongmaple0820hongmaple0820
9

solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana and Anchor programs.

Community
Advanced
erenisiklarerenisiklar

solana-vulnerability-scanner

Detect six critical vulnerability patterns in Solana and Anchor programs.

Community
Advanced
rohanbhatia27rohanbhatia27
1

solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana programs using Rust and Anchor.

Community
Advanced
tawf-labstawf-labs
1

solana-vulnerability-scanner

Scan Rust and Anchor Solana programs for six vulnerability patterns.

Official
Intermediate