Agent skill · security · aradotso
solana-security-standard
Use the SOL-0XX Solana security standard to scan, detect, and prevent 37 classes of Solana program vulnerabilities ($514M+ in real exploits) across AI tools, editors, CLI, and CI
Why this skill is useful
Adds a comprehensive set of 37 executable security rules for Solana programs that are not widely known or documented.
What it needs
Requires npx installed locally. About 6k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
solana-security-standard Skill by ara.so — Security Skills collection. The Solana Security Standard provides 37 SOL-0XX rules distilled from $514M+ of real Solana exploits. It catches caller-controlled clock values, cross-market state asymmetry, missing Anchor constraints, wrapper/engine drift, and 33 other bug classes — firing as you code in AI tools, editors, CLI, and CI. SOL-001 alone covers 2 confirmed bounty wins (caller-controlled nowslot in percolator). The standard works across Claude Code, Cursor, Windsurf, Copilot, Cline, Aider, the VS Code extension, the CLI, Semgrep, GitHub Actions, and any MCP client. Installation Claude Code (quickest) Then install the security-guidance plugin: Or install the full MCP-powered plugin: CLI (any machine) No install needed — runs via npx. Zero dependencies. CI — GitHub Action VS Code / Cursor / Windsurf Install from Open VSX: Cursor / Windsurf / VSCodium: Search "Solana Security Standard" in Extensions VS Code: Sideload .vsix from extensions/vscode/ Shows inline warnings as you type in Rust and TypeScript/JS files. MCP (any MCP client) Add to your MCP settings (.cline/mcp.json, .cursor/mcp.json, etc.): Exposes scansolanacode tool + listsolanasecurityrules resource. AI Agents (Codex, Copilot, Cursor, Windsurf, Cline, Aider) Copy the rules file for your tool: Tool Copy into repo ------ ---------------- Codex / AGENTS.md integrations/codex/AGENTS.md GitHub Copilot integrations/copilot/.github/copilot-instructions.md Cursor integrations/cursor/.cursor/ Windsurf integrations/windsurf/.windsurf/ Cline integrations/cline/.clinerules Aider integrations/aider/ Semgrep CLI Commands Scan programs Generate baseline CLI exits non-zero on findings (gates CI). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/solana-security-standard