Verify Seeker Ownership Securely
Client-only token gates can be bypassed or replayed. This skill combines wallet signatures, server-issued nonces, and Token-2022 checks for reliable Seeker verification.
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
Review the Skillstore skill "seeker-genesis-token" from https://skillstore.io/skills/solana-mobile-seeker-genesis-token.md and its manifest at https://skillstore.io/api/skills/solana-mobile-seeker-genesis-token/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
「seeker-genesis-token」を使用しています。 Explain why checking only the wallet address is unsafe.
期待される結果:
A public address does not prove control. Verify a fresh SIWS signature, then inspect the SGT held by the verified signed address.
「seeker-genesis-token」を使用しています。 How should one-claim-per-device state be stored?
期待される結果:
Store the verified SGT mint address as the device identity. Enforce uniqueness atomically so wallet transfers and concurrent requests cannot create duplicate claims.
「seeker-genesis-token」を使用しています。 What should happen when the Solana RPC is unavailable?
期待される結果:
Return a temporary service failure. Do not convert an RPC outage into a false statement that the user lacks an SGT.
The reported command-execution and reconnaissance patterns are Markdown formatting, JavaScript strings, or normal authentication checks. The intended RPC request is a low network dependency, while the uncapped pagination example creates a medium availability risk.
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/solana-mobile-seeker-genesis-token/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/solana-mobile-seeker-genesis-token.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>solana-mobile. (2026). seeker-genesis-token security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1@techreport{solana-mobile-solana-mobile-seeker-genesis-token-2026,
author = {solana-mobile},
title = {seeker-genesis-token security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "seeker-genesis-token security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "solana-mobile"
date-released: "2026-08-27"
url: "https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1"
identifiers:
- type: other
value: "skillstore:solana-mobile-seeker-genesis-token:audit:1"
description: "Skillstore immutable audit report identifier"
Add server-verified Seeker access to mobile application features without trusting a client-supplied wallet address.
Record each SGT mint once to prevent repeated claims after tokens move between wallets.
Evaluate nonce handling, signed-address binding, token identity checks, and zero-balance filtering before deployment.
Explain why secure Seeker verification requires both Sign-in-with-Solana and an SGT ownership check. Summarize the server responsibilities.
Design an SGT verification flow for my Solana mobile application. Include nonce issuance, signature verification, domain validation, and signed-address binding.
Adapt the SGT verification guidance for one reward claim per device. Store the mint identity and describe transaction boundaries for concurrent requests.
Review my SGT verification design for replay, address substitution, stale token accounts, RPC failures, unbounded pagination, and concurrent claim races.
作成者
solana-mobileライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
ba20ff01500daeacf8b388cd781507b37a0f87e8
メンテナンスの新しさ
2026/8/28
利用状況
1 ダウンロード · 0 閲覧
ファイル構成
Build Solana Mobile Apps for Android
Solana Mobile setup often fails because native modules, templates, and Android tooling must align. This skill guides reliable setup, integration, diagnosis, and emulator workflows.
Build Solana Mobile Wallet Features
Mobile wallet integration fails when React Native projects mix incompatible Solana clients or omit required provider and signing details. This skill provides stack-specific patterns for connection, chain data, transactions, message signing, authentication, and troubleshooting.
Integrate .skr Domain Resolution
Wallet addresses are difficult to recognize in Solana mobile interfaces. This skill provides tested patterns for resolving .skr names through clients or backend services.
Solana Anchorプロジェクトを生成
作成者 MSzgy
Solanaチームは、Anchor、テスト、ウォレット対応フロントエンドの接続に時間を費やします。このスキルは、一貫したバージョンとセットアップ手順を備えた完全なスタータープロジェクトを生成します。
Solana アプリとプログラムを構築
作成者 solana-foundation
Solana プロジェクトでは、多くの場合 UI、ウォレット、プログラム、テストに関する連携したガイダンスが必要です。このスキルは Claude、Codex、Claude Code に、構造化された Solana リファレンスと安全性チェックを提供します。
Manage Tokenized Stock and USDC Operations
作成者 starchild-ai-agent
Tokenized asset workflows combine multiple APIs, wallets, chains, signatures, and jurisdiction rules. This skill organizes Treasures Finance discovery, portfolio, quote, trade, bridge, and troubleshooting steps.
Audit Software Releases with Evidence
作成者 glenskii
Release decisions often rely on incomplete evidence and inconsistent standards. This skill applies structured controls, deterministic scoring, and mandatory gates to assess readiness.
Audit Python Web Apps Before Release
作成者 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
ISO 27001セキュリティガバナンスの実装
作成者 davila7
HealthcareおよびMedTechチームには、リスク、管理策、インシデント、監査を結び付ける体系的なISO 27001セキュリティプログラムが必要です。このスキルは、ISO 27001およびISO 27002を使用して、ISMS計画、リスクアセスメント、管理策の選定、認証準備を支援します。