Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs.
Install
npx skills add trailofbits/skills --skill solana-vulnerability-scannernpx skills add trailofbits/skills --skill solana-vulnerability-scanner -a claude-code -gnpx skills add trailofbits/skills --skill solana-vulnerability-scanner -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/building-secure-contracts/skills/solana-vulnerability-scannergh skill install trailofbits/skills solana-vulnerability-scannergit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/solana-vulnerability-scanner ~/.claude/skills/solana-vulnerability-scanner # Claude Code
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/solana-vulnerability-scanner ~/.agents/skills/solana-vulnerability-scanner # Codex, Cursor, Gemini CLI, Copilot, OpenCode