solana-vulnerability-scanner

Systematically scan Solana programs (native and Anchor framework) for platform-specific security vulnerabilities related to cross-program invocations, account validation, and program-derived addresses. This skill encodes 6 critical vulnerability patterns unique to Solana's account model. When invoked, I will: I check for 6 critical vulnerability patterns unique to Solana. For detailed detection patterns, code examples, mitigations, and testing strategies, see VULNERABILITY_PATTERNS.md . For complete vulnerability patterns with code examples, see VULNERABILITY_PATTERNS.md . For each CPI: For each PDA: For each account used: Attack Scenario : Recommendation : Use Anchor's Program type: References : Before completing Solana program audit: CPI Security (CRITICAL) : PDA Security (CRITICAL) : Account Validation (HIGH) : Signer Validation (CRITICAL) : Sysvar Security (HIGH) : Instruction Introspection (MEDIUM) : Testing : - Auditing Solana programs (native Rust or Anchor) - Reviewing cross-program invocation (CPI) logic - Validating program-derived address (PDA) implementations - Pre-launch security assessment of Solana protocols - Reviewing account validation patterns - Assessing instruction introspection logic - Rust files : .rs - programs/*/src/lib.rs - Program implementation - Anchor.toml - Anchor configuration - Cargo.toml with solana-program or anchor-lang - tests/ - Program...