solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana and Anchor smart contracts.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill solana-vulnerability-scanner-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill solana-vulnerability-scanner-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the high-stakes challenge of securing Solana smart contracts by automating the detection of critical vulnerability patterns that often lead to protocol exploits and financial loss.

Core Features & Use Cases

  • Automated Vulnerability Detection: Scans native Rust and Anchor programs for 6 critical security patterns, including arbitrary CPI and improper PDA validation.
  • Remediation Guidance: Provides detailed vulnerability reports with specific code-level fixes and security best practices.
  • Use Case: Before deploying a new DeFi protocol, use this Skill to perform a comprehensive security sweep of your program's account validation and cross-program invocation logic.

Quick Start

Use the solana-vulnerability-scanner skill to audit the programs in the current directory and report any critical security vulnerabilities.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solana smart contracts for security vulnerabilities before deployment?

To audit Solana smart contracts, you scan native Rust and Anchor programs to detect critical security vulnerabilities like arbitrary CPI and improper PDA validation. The scanner analyzes account validation and cross-program invocation logic, providing detailed remediation guidance.

What security flaws should I look for in Anchor programs?

Critical security flaws in Anchor programs include improper PDA validation, arbitrary CPI vulnerabilities, and insufficient account validation. The scanner targets six critical vulnerability patterns specific to Solana protocols to identify risks that could lead to exploits and financial loss.

Can I use an automated vulnerability scanner for Rust-based Solana protocols?

Yes, you can automate vulnerability detection for Rust-based Solana protocols. The scanner systematically identifies critical security patterns in native Rust and Anchor programs, targeting account validation and CPI logic to satisfy pre-launch security assessment requirements.

How do I fix improper PDA validation in Solana smart contracts?

To fix improper PDA validation in Solana smart contracts, review the scanner's vulnerability reports which provide specific code-level fixes and security best practices. The remediation guidance targets PDA implementations and account validation logic directly.

Does this Solana vulnerability scanner work with both native Rust and Anchor frameworks?

Yes, the Solana vulnerability scanner works with both native Rust and Anchor frameworks. It analyzes account validation, CPI logic, and PDA implementations across both program types to detect critical security vulnerabilities and ensure adherence to Solana security best practices.