solana-vulnerability-scanner

Detect security vulnerabilities in Solana programs using Rust and Anchor.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/iiammae/opero --skill solana-vulnerability-scanner-iiammae
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/iiammae/opero --skill solana-vulnerability-scanner-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires solana-program, anchor-lang, solana-lints, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and mitigates security vulnerabilities in Solana programs, ensuring robustness and reliability.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 6 critical vulnerabilities in Solana programs.
  • Code Analysis: Systematically scans Rust and Anchor programs for specific patterns.
  • Security Reporting: Provides detailed reports with severity levels and recommendations.
  • Use Case: Before deploying a Solana protocol, use this Skill to audit the codebase for vulnerabilities.

Quick Start

Run the solana-vulnerability-scanner skill on your Solana program to detect and fix security issues.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Solana program for security vulnerabilities before deployment?

To scan a Solana program for security vulnerabilities, use a specialized scanner to audit your codebase for critical issues. This Skill systematically analyzes Rust and Anchor programs to detect vulnerabilities and provides detailed reports with severity levels and recommendations.

What critical vulnerabilities should I look for in Solana Anchor programs?

Critical vulnerabilities in Solana Anchor programs often involve cross-program invocations, account validation, and program-derived addresses. This scanner identifies six specific critical vulnerability patterns, ensuring robustness and reliability before you deploy your protocol.

Does Solana vulnerability scanning require Rust and Anchor programming knowledge?

Yes, Solana vulnerability scanning requires Rust and Anchor programming knowledge. The code analysis process utilizes linters and testing frameworks to identify specific security patterns, so understanding the underlying program structure is necessary to interpret and mitigate the reported issues.

Can I use linters and testing frameworks for Solana code analysis?

You can use linters and testing frameworks for Solana code analysis to identify specific security patterns. This Skill integrates solana-lints, solana-program, and anchor-lang dependencies to systematically scan your codebase and generate detailed security reports.

What's the best way to audit program-derived addresses and cross-program invocations in Solana?

The best way to audit program-derived addresses and cross-program invocations in Solana is to run a dedicated vulnerability scanner. This approach systematically detects and mitigates security vulnerabilities, providing precise reports with severity levels and actionable recommendations.

Why does my Solana protocol need account validation checks before mainnet deployment?

Your Solana protocol needs account validation checks to prevent unauthorized access and ensure robustness against attacks. Running a vulnerability scanner before deployment identifies critical account validation flaws and provides specific recommendations to mitigate them.