skills.rest
ladinglogichq
ladinglogichqOFFICIAL
Explore all skills by this author →
GitHub

solana-vulnerability-scanner

Scan Solana Rust and Anchor programs for six critical vulnerability patterns.

Updated Apr 23, 2026
Search Tags:#pda#security-audit#anchor#solana#cpi#solana-program
One-click install
npx skills add https://github.com/ladinglogichq/lading-logic-hackathon --skill solana-vulnerability-scanner-ladinglogichq
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/ladinglogichq/lading-logic-hackathon/tree/main/.claude/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/ladinglogichq/lading-logic-hackathon --skill solana-vulnerability-scanner-ladinglogichq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scans for six critical Solana vulnerability patterns across native Solana programs and Anchor-based contracts, enabling proactive security audits.

Core Features & Use Cases

  • Detects common Solana vulnerabilities such as arbitrary CPI, improper PDA validation, missing ownership and signer checks, sysvar spoofing, and instruction introspection issues.
  • Applies to Rust-based Solana programs and Anchor programs for pre-production audits and security hardening.
  • Example: Use this to audit a Solana program before deployment to identify weaknesses and generate remediation steps.

Quick Start

Scan your Solana project to surface and remediate critical issues.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solana program for critical vulnerabilities before deployment?▼

To audit a Solana program, scan your project source files under the programs/* directory to identify six critical vulnerability patterns, generating structured findings with file references, severity levels, and remediation steps.

What common Solana vulnerability patterns should I check for in my Anchor program?▼

Common Solana vulnerability patterns include arbitrary CPI usage, improper PDA validation, missing ownership and signer checks, sysvar spoofing, and instruction introspection issues across native Rust and Anchor programs.

Can I use this to scan both native Rust and Anchor-based Solana contracts?▼

Yes, this vulnerability scanner applies to both native Rust Solana programs and Anchor-based contracts, analyzing CPI usage, PDA validation, ownership checks, signer validation, sysvar handling, and instruction introspection.

How do I perform a security audit on Solana program source files and tests?▼

Perform a security audit by analyzing program source files, tests, and configuration under programs/*. The scanner references your code to produce structured findings detailing file locations, severity, and remediation steps.

Does this Solana vulnerability scanner check for missing signer and ownership validation?▼

Yes, the scanner specifically checks for missing ownership and signer validation, alongside sysvar spoofing, improper PDA validation, arbitrary CPI usage, and instruction introspection issues in Solana programs.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

solana-vulnerability-scanner

Scan Solana native and Anchor program sources for six vulnerability patterns.

Official
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
sablier-labssablier-labs
10

solana

Guide Anchor-based Solana program development with PDA account modeling and testing.

Official
Advanced
ofelixdevofelixdev

solana-vulnerability-scanner

Scans Solana and Anchor programs for six critical vulnerability patterns.

Community
Advanced