Home / Skills / solana-vulnerability-scanner

solana-vulnerability-scanner From the maker

trailofbits/skillsSkill

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs.

ScannedSkillSource: GitHub
7,649 stars +148 this week Updated 16d ago License CC-BY-SA-4.0 Context ≈57 tokens always loaded
78popular

Why this score

Stars20/35
Usage (forks)8/15
Upkeep25/25
License15/15
Owner history10/10

This repo hosts 10 skills, so its 7,649 stars are split between them (about 765 each) for scoring.

Popularity score: 78/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 5c99c03fb8a9, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

NameScoreStarsContextUpdated
This onesolana-vulnerability-scanner trailofbits/skills · Skill 78★ 7.6k≈57 always16d ago
02-vulnerability-scanner Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about scanner and vulnerability 66★ 490≈24 always19d ago
solana-architect solanabr/ai-kit · Subagent Both about solana and pda 60★ 109≈45 in chat21d ago
solana-dev solana-foundation/solana-dev-skill · Skill Both about solana and pda 78★ 579≈153 always19d ago
edgeone skill scanner Tencent/AI-Infra-Guard · Skill Both about scanner and scan 78★ 6.9k≈23 always16d ago
architecture-scanner romiluz13/cc10x · Subagent Both about scanner and scan 60★ 165≈56 in chat28d ago