Verify Seeker Ownership Securely
Client-only token gates can be bypassed or replayed. This skill combines wallet signatures, server-issued nonces, and Token-2022 checks for reliable Seeker verification.
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "seeker-genesis-token" from https://skillstore.io/skills/solana-mobile-seeker-genesis-token.md and its manifest at https://skillstore.io/api/skills/solana-mobile-seeker-genesis-token/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Использование «seeker-genesis-token». Explain why checking only the wallet address is unsafe.
Ожидаемый результат:
A public address does not prove control. Verify a fresh SIWS signature, then inspect the SGT held by the verified signed address.
Использование «seeker-genesis-token». How should one-claim-per-device state be stored?
Ожидаемый результат:
Store the verified SGT mint address as the device identity. Enforce uniqueness atomically so wallet transfers and concurrent requests cannot create duplicate claims.
Использование «seeker-genesis-token». What should happen when the Solana RPC is unavailable?
Ожидаемый результат:
Return a temporary service failure. Do not convert an RPC outage into a false statement that the user lacks an SGT.
The reported command-execution and reconnaissance patterns are Markdown formatting, JavaScript strings, or normal authentication checks. The intended RPC request is a low network dependency, while the uncapped pagination example creates a medium availability risk.
Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/solana-mobile-seeker-genesis-token?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/solana-mobile-seeker-genesis-token/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/solana-mobile-seeker-genesis-token.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>solana-mobile. (2026). seeker-genesis-token security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1@techreport{solana-mobile-solana-mobile-seeker-genesis-token-2026,
author = {solana-mobile},
title = {seeker-genesis-token security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "seeker-genesis-token security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "solana-mobile"
date-released: "2026-08-27"
url: "https://skillstore.io/skills/solana-mobile-seeker-genesis-token/audits/1"
identifiers:
- type: other
value: "skillstore:solana-mobile-seeker-genesis-token:audit:1"
description: "Skillstore immutable audit report identifier"
Add server-verified Seeker access to mobile application features without trusting a client-supplied wallet address.
Record each SGT mint once to prevent repeated claims after tokens move between wallets.
Evaluate nonce handling, signed-address binding, token identity checks, and zero-balance filtering before deployment.
Explain why secure Seeker verification requires both Sign-in-with-Solana and an SGT ownership check. Summarize the server responsibilities.
Design an SGT verification flow for my Solana mobile application. Include nonce issuance, signature verification, domain validation, and signed-address binding.
Adapt the SGT verification guidance for one reward claim per device. Store the mint identity and describe transaction boundaries for concurrent requests.
Review my SGT verification design for replay, address substitution, stale token accounts, RPC failures, unbounded pagination, and concurrent claim races.
Автор
solana-mobileЛицензия
MIT
Ревизия Skillstore
r1
Примечание о версии
Автор не указал версию.
Ссылка
ba20ff01500daeacf8b388cd781507b37a0f87e8
Актуальность поддержки
28.08.2026
Использование
1 загрузок · 0 просмотров
Структура файлов
Build Solana Mobile Apps for Android
Solana Mobile setup often fails because native modules, templates, and Android tooling must align. This skill guides reliable setup, integration, diagnosis, and emulator workflows.
Build Solana Mobile Wallet Features
Mobile wallet integration fails when React Native projects mix incompatible Solana clients or omit required provider and signing details. This skill provides stack-specific patterns for connection, chain data, transactions, message signing, authentication, and troubleshooting.
Integrate .skr Domain Resolution
Wallet addresses are difficult to recognize in Solana mobile interfaces. This skill provides tested patterns for resolving .skr names through clients or backend services.
Генерация проектов Solana Anchor
от MSzgy
Команды Solana тратят время на настройку Anchor, тестов и фронтендов с кошельками. Этот навык генерирует полноценный стартовый проект с согласованными версиями и шагами настройки.
Создание приложений и программ Solana
от solana-foundation
Проектам Solana часто требуется согласованное руководство по UI, кошелькам, программам и тестированию. Этот навык дает Claude, Codex и Claude Code структурированные справочные материалы по Solana и проверки безопасности.
Manage Tokenized Stock and USDC Operations
от starchild-ai-agent
Tokenized asset workflows combine multiple APIs, wallets, chains, signatures, and jurisdiction rules. This skill organizes Treasures Finance discovery, portfolio, quote, trade, bridge, and troubleshooting steps.
Audit Software Releases with Evidence
от glenskii
Release decisions often rely on incomplete evidence and inconsistent standards. This skill applies structured controls, deterministic scoring, and mandatory gates to assess readiness.
Audit Python Web Apps Before Release
от glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Внедрение управления безопасностью по ISO 27001
от davila7
Командам Healthcare и MedTech нужны структурированные программы безопасности ISO 27001, которые связывают риски, меры контроля, инциденты и аудиты. Этот навык помогает в планировании ISMS, оценке рисков, выборе мер контроля и подготовке к сертификации с использованием ISO 27001 и ISO 27002.