solana-vulnerability-scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, and missing security checks. Systematically scan Solana programs (native and Anchor framework) for platform-specific security vulnerabilities related to cross-program invocations, account validation, and program-derived addresses. This skill encodes 6 critical vulnerability patterns unique to Solana's account model. When invoked, I will: I check for 6 critical vulnerability patterns unique to Solana. For detailed detection patterns, code examples, mitigations, and testing strategies, see VULNERABILITY_PATTERNS.md . For complete vulnerability patterns with code examples, see VULNERABILITY_PATTERNS.md . For each CPI: For each PDA: For each account used: Attack Scenario : Recommendation : Use Anchor's Program type: References : Before completing Solana program audit: CPI Security (CRITICAL) : PDA Security (CRITICAL) : Account Validation (HIGH) : Signer Validation (CRITICAL) : Sysvar Security (HIGH) : Instruction Introspection (MEDIUM) : Testing : - Detects 6 vulnerability patterns: arbitrary CPI, improper PDA validation, missing ownership checks, missing signer checks, sysvar spoofing, and improper instruction introspection - Supports both native Solana and Anchor framework programs with automatic platform detection - Provides detailed findings with vulnerable code snippets,...