Verify Seeker Ownership Securely
Client-only token gates can be bypassed or replayed. This skill combines wallet signatures, server-issued nonces, and Token-2022 checks for reliable Seeker verification.
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
Review the Skillstore skill "seeker-genesis-token" from https://skillstore.io/skills/solana-mobile-seeker-genesis-token.md and its manifest at https://skillstore.io/api/skills/solana-mobile-seeker-genesis-token/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
جارٍ استخدام "seeker-genesis-token". Explain why checking only the wallet address is unsafe.
النتيجة المتوقعة:
A public address does not prove control. Verify a fresh SIWS signature, then inspect the SGT held by the verified signed address.
جارٍ استخدام "seeker-genesis-token". How should one-claim-per-device state be stored?
النتيجة المتوقعة:
Store the verified SGT mint address as the device identity. Enforce uniqueness atomically so wallet transfers and concurrent requests cannot create duplicate claims.
جارٍ استخدام "seeker-genesis-token". What should happen when the Solana RPC is unavailable?
النتيجة المتوقعة:
Return a temporary service failure. Do not convert an RPC outage into a false statement that the user lacks an SGT.
The reported command-execution and reconnaissance patterns are Markdown formatting, JavaScript strings, or normal authentication checks. The intended RPC request is a low network dependency, while the uncapped pagination example creates a medium availability risk.
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/solana-mobile-seeker-genesis-token/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/solana-mobile-seeker-genesis-token.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>solana-mobile. (2026). seeker-genesis-token security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1@techreport{solana-mobile-solana-mobile-seeker-genesis-token-2026,
author = {solana-mobile},
title = {seeker-genesis-token security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "seeker-genesis-token security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "solana-mobile"
date-released: "2026-08-27"
url: "https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1"
identifiers:
- type: other
value: "skillstore:solana-mobile-seeker-genesis-token:audit:1"
description: "Skillstore immutable audit report identifier"
Add server-verified Seeker access to mobile application features without trusting a client-supplied wallet address.
Record each SGT mint once to prevent repeated claims after tokens move between wallets.
Evaluate nonce handling, signed-address binding, token identity checks, and zero-balance filtering before deployment.
Explain why secure Seeker verification requires both Sign-in-with-Solana and an SGT ownership check. Summarize the server responsibilities.
Design an SGT verification flow for my Solana mobile application. Include nonce issuance, signature verification, domain validation, and signed-address binding.
Adapt the SGT verification guidance for one reward claim per device. Store the mint identity and describe transaction boundaries for concurrent requests.
Review my SGT verification design for replay, address substitution, stale token accounts, RPC failures, unbounded pagination, and concurrent claim races.
المؤلف
solana-mobileالترخيص
MIT
مراجعة Skillstore
r1
تنبيه الإصدار
لم يعلن المؤلف عن إصدار.
مرجع
ba20ff01500daeacf8b388cd781507b37a0f87e8
حداثة الصيانة
٢٨/٨/٢٠٢٦
الاستخدام
1 تنزيلات · 0 مشاهدات
بنية الملفات
Build Solana Mobile Apps for Android
Solana Mobile setup often fails because native modules, templates, and Android tooling must align. This skill guides reliable setup, integration, diagnosis, and emulator workflows.
Build Solana Mobile Wallet Features
Mobile wallet integration fails when React Native projects mix incompatible Solana clients or omit required provider and signing details. This skill provides stack-specific patterns for connection, chain data, transactions, message signing, authentication, and troubleshooting.
Integrate .skr Domain Resolution
Wallet addresses are difficult to recognize in Solana mobile interfaces. This skill provides tested patterns for resolving .skr names through clients or backend services.
إنشاء مشاريع Solana Anchor
بواسطة MSzgy
تقضي فرق Solana وقتا في توصيل Anchor والاختبارات وواجهات المحافظ الأمامية. تنشئ هذه المهارة مشروع بداية كاملا بإصدارات وخطوات إعداد متسقة.
بناء تطبيقات وبرامج Solana
بواسطة solana-foundation
غالبًا ما تحتاج مشاريع Solana إلى إرشادات منسقة لواجهة المستخدم والمحفظة والبرامج والاختبارات. تمنح هذه المهارة Claude وCodex وClaude Code مراجع Solana منظمة وفحوصات أمان.
Manage Tokenized Stock and USDC Operations
بواسطة starchild-ai-agent
Tokenized asset workflows combine multiple APIs, wallets, chains, signatures, and jurisdiction rules. This skill organizes Treasures Finance discovery, portfolio, quote, trade, bridge, and troubleshooting steps.
Audit Software Releases with Evidence
بواسطة glenskii
Release decisions often rely on incomplete evidence and inconsistent standards. This skill applies structured controls, deterministic scoring, and mandatory gates to assess readiness.
Audit Python Web Apps Before Release
بواسطة glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
تطبيق حوكمة أمن ISO 27001
بواسطة davila7
تحتاج فرق الرعاية الصحية وMedTech إلى برامج أمن منظمة وفق ISO 27001 تربط بين المخاطر والضوابط والحوادث وعمليات التدقيق. توجه هذه المهارة تخطيط ISMS وتقييم المخاطر واختيار الضوابط والاستعداد للاعتماد باستخدام ISO 27001 وISO 27002.