solana-vulnerability-scanner

Detect critical security vulnerabilities in Solana programs using Rust and Anchor.

1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill solana-vulnerability-scanner-rohanbhatia27
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solana-vulnerability-scanner
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/solana-vulnerability-scanner
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill solana-vulnerability-scanner-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires solana-program, anchor-lang, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the scanning of Solana programs for critical security vulnerabilities, saving developers time and reducing the risk of security breaches.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 6 critical vulnerabilities unique to Solana programs.
  • Code Analysis: Scans Rust and Anchor programs for security issues.
  • Use Case: Before deploying a Solana program, use this Skill to automatically scan for vulnerabilities and ensure the program is secure.

Quick Start

Run the solana-vulnerability-scanner skill on your Solana program to automatically detect and report security vulnerabilities.

Frequently Asked Questions about solana-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Solana programs for security vulnerabilities before deployment?

To scan Solana programs for security vulnerabilities, you can automate the detection of critical issues like arbitrary CPI and sysvar spoofing using Rust and Anchor frameworks. This requires having the respective Rust and Anchor tools installed for code analysis.

What specific vulnerabilities can be automatically detected in Anchor and Rust code?

Vulnerability detection in Anchor and Rust code identifies six critical Solana program issues, including arbitrary CPI, improper PDA validation, missing signer checks, missing ownership checks, and sysvar spoofing.

Does this Solana vulnerability scanner require specific dependencies or environments to run?

Yes, the Solana vulnerability scanner requires the Rust and Anchor development tools to be installed in your environment, alongside the solana-program and anchor-lang dependencies for accurate code analysis.

When do I need to perform automated vulnerability detection on Solana smart contracts?

Automated vulnerability detection on Solana smart contracts is needed before deployment to ensure the program is secure, saving development time and reducing the risk of security breaches caused by missing signer checks or improper PDA validation.

What is the best way to check for missing signer and ownership checks in Solana programs?

The best way to check for missing signer and ownership checks in Solana programs is to run an automated security scanner that analyzes Rust and Anchor code to detect these critical vulnerabilities before deployment.

Can I use this scanner to detect arbitrary CPI and improper PDA validation in my Anchor code?

Yes, you can use this scanner to detect arbitrary CPI and improper PDA validation in Anchor code. It automates the identification of these specific vulnerabilities along with sysvar spoofing and missing security checks.