skills.rest
DobricLilujun
DobricLilujunCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

solana-vulnerability-scanner

Detect six critical vulnerability patterns in Solana programs and Anchor projects.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#pda#anchor#solana#cpi#scanner
One-click install
npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill solana-vulnerability-scanner-dobriclilujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/DobricLilujun/LabAgentSkill/tree/main/skillsHub/skills_scaling/building-secure-contracts/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill solana-vulnerability-scanner-dobriclilujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditors and developers need a reliable way to identify and remediate vulnerabilities in Solana programs, including CPI misuses, PDA validation gaps, and signer/ownership checks.

Core Features & Use Cases

  • Detects 6 critical vulnerability patterns across native Solana programs and Anchor-based projects.
  • Assists security reviews by locating insecure CPI usage, improper PDA handling, and missing signer checks, with actionable remediation guidance.
  • Generates structured reports linking findings to source files and relevant patterns, suitable for integration into CI workflows.

Quick Start

Scan your Solana workspace with the vulnerability scanner to generate a remediation report for identified issues.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Solana program for missing signer checks and improper PDA validation?▼

To scan a Solana program for missing signer checks and improper PDA validation, use a Solana vulnerability scanner to identify six critical patterns across native Rust and Anchor projects, outputting actionable remediation reports with file references and test ideas.

What is the best way to detect arbitrary CPI vulnerabilities in Anchor programs?▼

Detecting arbitrary CPI vulnerabilities in Anchor programs requires scanning program structure and CPI usage to locate insecure calls. The scanner outputs structured findings linking vulnerabilities to source files and recommended mitigations.

Does the Solana vulnerability scanner work with both native Rust and Anchor-based workspaces?▼

Yes, the Solana vulnerability scanner works with both native Rust programs and Anchor-based projects, scanning account validation and CPI usage across typical Solana workspaces to identify critical security gaps.

Can I integrate Solana vulnerability scanning into my CI workflow?▼

You can integrate Solana vulnerability scanning into CI workflows using reproducible checks. The scanner generates structured reports linking findings to source files and relevant patterns, suitable for continuous developer workflows.

What critical vulnerability patterns are typically found in Solana smart contracts?▼

Critical vulnerability patterns in Solana smart contracts include arbitrary CPI, improper PDA validation, and missing signer or ownership checks. Scanning program structure identifies these issues and outputs actionable findings with recommended mitigations.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

solana-vulnerability-scanner

Scan Solana native and Anchor program sources for six vulnerability patterns.

Official
Advanced
mejangomejango

solana-vulnerability-scanner

Scan Solana programs for six vulnerability patterns and generate remediation reports.

Community
Advanced
hairyfhairyf
4

solana-anchor

Develop Solana smart contracts using the Anchor framework.

Community
Advanced
rohanbhatia27rohanbhatia27
1

solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana programs using Rust and Anchor.

Community
Advanced