SkillsAdd

plurigrid/asi

solana-vulnerability-scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs. (project, gitignored)

First seen Jan 29, 2026

Installation

$ npx skills add plurigrid/asi --skill solana-vulnerability-scanner
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

solana-vulnerability-scanner Similar name
trailofbits/skills

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA vali…

4.9K installs
cosmos-vulnerability-scanner Similar name
trailofbits/skills

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabiliti…

4.6K installs
algorand-vulnerability-scanner Similar name
trailofbits/skills

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchec…

4.5K installs
ton-vulnerability-scanner Similar name
trailofbits/skills

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-a…

4.5K installs
cairo-vulnerability-scanner Similar name
trailofbits/skills

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmeti…

4.5K installs
substrate-vulnerability-scanner Similar name
trailofbits/skills

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, …

4.4K installs

Also in this package

Other skills from plurigrid/asi · top by installs.

npx skills add plurigrid/asi
academic-research 164 tree-sitter 42 wev-tesseract 40 reverse-engineering 24 beeper-mcp 21 bdd-mathematical-verification 20 alife 17 backend-development 15 tizen-app-scaffold 14 canvas-design 13

Browse all from plurigrid/asi

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Also listed on

Alternate registries and mirrors of this skill.

Repository health

Stars 62
License LICENSE
Default branch main
Open issues 3
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

LicenseAGPL-3.0

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,601 B
  • docs SUMMARY.md 256 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 6 installs

SKILL.md

Solana Vulnerability Scanner Skill

Trit: -1 (MINUS) Category: building-secure-contracts Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs. (project, gitignored)

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

  • audit-context-building
  • codeql
  • semgrep
  • variant-analysis

SDF Interleaving

This skill connects to Software Design for Flexibility (Hanson & Sussman, 2021):

Primary Chapter: 3. Variations on an Arithmetic Theme

Concepts: generic arithmetic, coercion, symbolic, numeric

GF(3) Balanced Triad

solana-vulnerability-scanner (+) + SDF.Ch3 (○) + [balancer] (−) = 0

Skill Trit: 1 (PLUS - generation)

Connection Pattern

Generic arithmetic crosses type boundaries. This skill handles heterogeneous data.