Solana Vulnerability Scanner

Name: Solana Vulnerability Scanner
Author: trailofbits

🌐Community

by trailofbits · vlatest · Repository

This Solana Vulnerability Scanner automatically identifies potential security weaknesses in your Solana smart contracts, boosting project resilience.

Install on your platform

We auto-selected Claude Code based on this skill’s supported platforms.

Run in terminal (recommended)

terminal

claude mcp add solana-vulnerability-scanner npx -- -y @trustedskills/solana-vulnerability-scanner

Or manually add to ~/.claude/settings.json

~/.claude/settings.json

{
  "mcpServers": {
    "solana-vulnerability-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@trustedskills/solana-vulnerability-scanner"
      ]
    }
  }
}

Requires Claude Code (claude CLI). Run claude --version to verify your install.

About This Skill

What it does

The solana-vulnerability-scanner skill analyzes Solana programs for common security vulnerabilities. It identifies potential issues like instruction signature verification bypasses, oracle manipulation, and improper access control within smart contracts deployed on the Solana blockchain. This allows developers to proactively address weaknesses before they can be exploited.

When to use it

Auditing new Solana programs: Before deploying a program to mainnet, scan for vulnerabilities.
Reviewing existing Solana programs: Regularly check deployed programs for newly discovered vulnerability patterns.
Analyzing open-source Solana projects: Assess the security posture of third-party code before integrating it into your own applications.
Responding to security concerns: Investigate potential vulnerabilities reported by community members or internal teams.

Key capabilities

Solana program analysis
Vulnerability detection
Identification of common smart contract flaws (e.g., signature verification bypasses, oracle manipulation)
Support for various Solana instruction patterns

Example prompts

"Scan the Solana program BpMP5DeBEEsyo1Gbuh6DRu2tSW98CmfWq7hKqUaJpR4o for vulnerabilities."
"Analyze this Solana program code snippet and identify any potential security risks: [paste code here]"
“What are the common vulnerability patterns found in Solana programs?”

Tips & gotchas

The skill requires a working understanding of Solana blockchain architecture and smart contract principles to effectively interpret results. It's recommended to combine this tool with manual code review for comprehensive security assessments.

View Repository →

TrustedSkills Verification

Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.

Security Audits

Gen Agent Trust Hub	Pass
Socket	Pass
Snyk	Pass

Details

Version: vlatest
License
Author: trailofbits
Installs: 0

Repository (canonical source) →

🌐 Community

Passed automated security scans.