solana-vulnerability-scanner
Scans Solana programs for security vulnerabilities like arbitrary CPI, PDA validation, and missing signer checks.
Install
npx skills add https://github.com/trailofbits/skills --skill solana-vulnerability-scannerStats
| Total installs | 1,350 |
| Weekly installs | 1.3K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Detects 6 vulnerability patterns: arbitrary CPI, improper PDA validation, missing ownership checks, missing signer checks, sysvar spoofing, and improper instruction introspection
- Supports both native Solana and Anchor framework programs with automatic platform detection
- Provides detailed findings with vulnerable code snippets, attack scenarios, and specific remediation guidance for each issue
- Includes scanning workflow covering CPI security, PDA validation, account validation, signer checks, and instruction introspection patterns
Tags
Related skills
| Skill | Installs | vs solana-vulnerability-scanner |
|---|---|---|
| audit-prep-assistant | 1,254 | -96 |
| variant-analysis | 1,380 | +30 |
| codeql | 1,429 | +79 |
| code-maturity-assessor | 1,232 | -118 |
| okx-dex-trenches | 1,360 | +10 |
FAQ
- How many installs does solana-vulnerability-scanner have?
- solana-vulnerability-scanner has 1,350 total installs and 1.3K installs this week.
- Where is solana-vulnerability-scanner hosted?
- solana-vulnerability-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does solana-vulnerability-scanner have?
- solana-vulnerability-scanner has 4.0K GitHub stars.
- When was solana-vulnerability-scanner first indexed?
- OrangeBot.AI first indexed solana-vulnerability-scanner on Jan 19, 2026.
- How do I install solana-vulnerability-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill solana-vulnerability-scanner