Skills generating-solana-projects
๐Ÿ“ฆ

generating-solana-projects

Content revision r2 High Risk ๐Ÿ“ Filesystem accessโšก Contains scripts๐ŸŒ Network accessโš™๏ธ External commands

Generate Complete Solana Projects

Building a Solana program and wallet frontend requires coordinated Rust, TypeScript, Anchor, and Next.js files. This skill creates a consistent project scaffold and setup workflow.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "generating-solana-projects" from https://skillstore.io/skills/mszgy-generating-solana-projects.md and its manifest at https://skillstore.io/api/skills/mszgy-generating-solana-projects/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "generating-solana-projects". Create a simple Solana voting application for local development.

Expected outcome:

  • Anchor workspace with poll and vote account modules
  • TypeScript tests for poll creation, voting, and rejection cases
  • Next.js interface with wallet connection and poll results
  • Local validator, build, and test instructions

Using "generating-solana-projects". Build an NFT marketplace scaffold with listings and offers.

Expected outcome:

  • Rust program structure for listing, offer, acceptance, and cancellation flows
  • Frontend components for browsing listings and submitting wallet transactions
  • Configuration placeholders for the generated program ID
  • A reminder that marketplace logic requires independent security review

Using "generating-solana-projects". Generate a token staking prototype with time-based rewards.

Expected outcome:

  • Stake pool and user position account templates
  • Instruction modules for staking, withdrawal, and reward claims
  • Calculation and authorization test plan
  • Wallet-connected dashboard scaffold

Security Audit

High Risk
v5 โ€ข 8/9/2026 Open versioned report

All 19 static findings are false positives caused by documentation paths, standard imports, local endpoints, framework configuration, or Markdown formatting. However, the skill promotes production-ready Solana deployments without mandatory security controls and installs dependency ranges without lockfile guidance. Security review and reproducible dependency controls are required before publication.

5
Files scanned
1,012
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Production Deployment Guidance Lacks Security Gates
The skill calls its output production-ready and provides deployment steps, but its generic account, handler, and test templates do not require Solana-specific threat modeling or independent review. Generated financial programs could reach production without explicit signer, ownership, PDA, arithmetic, authorization, or CPI validation.
The production-ready claim and deployment workflow are explicit, while the cited security-critical templates contain placeholders and no mandatory review gate. This is especially consequential for the listed DeFi, escrow, marketplace, and treasury use cases.
Medium
Dependency Installation Is Not Reproducible
The generated package template uses dependency ranges, and the workflow runs yarn install without requiring a committed lockfile or integrity review. Future installations can resolve different direct or transitive packages before deployment.
The package template visibly uses caret ranges and the installation steps do not mention a lockfile. This creates a clear supply-chain reproducibility gap.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/mszgy-generating-solana-projects/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/mszgy-generating-solana-projects/security.svg)](https://skillstore.io/skills/mszgy-generating-solana-projects?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/mszgy-generating-solana-projects?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/mszgy-generating-solana-projects/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/mszgy-generating-solana-projects.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

MSzgy. (2026). generating-solana-projects security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/mszgy-generating-solana-projects/audits/5

BibTeX citation

@techreport{mszgy-mszgy-generating-solana-projects-2026, author = {MSzgy}, title = {generating-solana-projects security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/mszgy-generating-solana-projects/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "generating-solana-projects security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "MSzgy" date-released: "2026-08-09" url: "https://skillstore.io/skills/mszgy-generating-solana-projects/audits/5" identifiers: - type: other value: "skillstore:mszgy-generating-solana-projects:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Prototype a voting application

Create an Anchor voting program, TypeScript tests, and a wallet-connected interface for local validation.

Bootstrap a marketplace project

Generate program modules and frontend components for listings, offers, and wallet transactions.

Teach Anchor architecture

Show how Rust programs, generated types, tests, configuration, and Next.js clients connect.

Try These Prompts

Create a starter counter
Create a Solana counter project named {project_name}. Use Anchor 0.32.1 and include a Next.js wallet interface, tests, and localnet setup.
Build a voting application
Generate a voting application named {project_name}. Include poll creation, one vote per wallet, poll closing, negative tests, and a results interface.
Design a staking prototype
Create a token staking prototype for {token_mint}. Add pool initialization, stake, unstake, reward claims, authority checks, calculation tests, and a dashboard.
Plan a governed treasury
Generate a DAO treasury project with proposals, weighted voting, timelocked execution, and role constraints. Include invariant tests and document every trust assumption.

Best Practices

  • Begin on localnet and verify every generated program ID before testing.
  • Add adversarial tests for signers, ownership, PDAs, arithmetic, authorization, and account substitution.
  • Commit reviewed lockfiles and obtain an independent audit before any mainnet deployment.

Avoid

  • Do not deploy placeholder handlers or generic account constraints to mainnet.
  • Do not store private keys, seed phrases, or wallet files inside the generated project.
  • Do not accept dependency updates without lockfile review, integrity checks, and testing.

Frequently Asked Questions

What does this skill generate?
It generates an Anchor workspace, Rust program templates, TypeScript tests, Next.js wallet integration, and setup instructions.
Does the generated project work without changes?
No. You must generate a program ID, replace placeholders, implement business logic, install dependencies, build, and test.
Which versions does the skill target?
It targets Anchor 0.32.1, Next.js 14.0.4, Solana Web3.js 1.87.6, React 18, and TypeScript 5.
Can I deploy the output directly to mainnet?
No. Complete security reviews, adversarial tests, dependency audits, and an independent smart contract audit before mainnet use.
Which wallets are included?
The frontend template configures Phantom and Solflare through Solana wallet adapter packages.
Does this skill manage private keys?
No. Anchor uses the configured local Solana wallet, but the skill should never copy, display, or transmit private key material.

Developer Details

Author

MSzgy

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

02be9409c79ca1183f7844009c14d9df684d0cf9

Maintenance freshness

8/11/2026

Usage

11 downloads ยท 130 views

File structure

๐Ÿ“„ .gitignore

๐Ÿ“„ examples.md

๐Ÿ“„ README.md

๐Ÿ“„ reference.md

๐Ÿ“„ SKILL.md

View all