solana-vulnerability-scanner

name	solana-vulnerability-scanner
description	Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs.
source_skill_id	trailofbits-skills-plugins-building-secure-contracts-skills-solana-vulnerability-scanner-skill-md
category	Security, compliance & risk
source_mirror	../../../../../skills/by-category/security-compliance-risk/security-reference/solana-vulnerability-scanner/SKILL.md
benchmark_status	artifact_gated

solana-vulnerability-scanner

Use this skill when the task matches the description above or the source path clearly applies. Start with this concise entrypoint; open ../../../../../skills/by-category/security-compliance-risk/security-reference/solana-vulnerability-scanner/SKILL.md only when implementation details, commands, assets, or references are needed.

Workflow

1. Confirm the task matches this skill's scope.
2. Read the local source mirror if more detail is required.
3. Follow repository-level AGENTS.md; use one AI session only.
4. Keep claims tied to files, commands, citations, or benchmark artifacts.

Verification

• Source mirror: ../../../../../skills/by-category/security-compliance-risk/security-reference/solana-vulnerability-scanner/SKILL.md
• Source commit: e8cc5baf9329ccb491bfa200e82eacbac83b1ead
• Static benchmark results: see docs/benchmark-results.md
• Runtime artifacts recorded by this entrypoint: 0
• Assigned scenarios: skill-proof-trailofbits-skills-plugins-building-secure-contracts-skills-solana-vulnerability-scanner-skill-md, security-compliance-and-risk-owasp-benchmark, security-compliance-and-risk-owasp-juice-shop, security-compliance-and-risk-kubernetes-examples

Do not claim this skill passed a runtime benchmark until a validated artifact exists.