技能 solana-dev
📦
solana-dev
v1.1.0 内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问⚡ 包含脚本🔑 环境变量
构建 Solana 应用和程序
Solana 项目通常需要协调 UI、钱包、程序和测试方面的指导。此技能为 Claude、Codex 和 Claude Code 提供结构化的 Solana 参考资料和安全检查。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "solana-dev" from https://skillstore.io/skills/solana-foundation-solana-dev.md and its manifest at https://skillstore.io/api/skills/solana-foundation-solana-dev/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“solana-dev”。 我需要为 Next.js 应用设计一个 Solana 钱包连接流程。
预期结果:
该技能会返回按文件划分的计划、推荐的钱包提供方设置、devnet RPC 设置、签名检查点和测试覆盖说明。
正在使用“solana-dev”。 我的 Anchor 程序在升级依赖项后失败。
预期结果:
该技能会识别可能的版本不匹配，解释迁移路径，并列出在更改文件之前需要检查的命令。
正在使用“solana-dev”。 审查这条 token 转账指令是否存在安全问题。
预期结果:
该技能会检查账户所有权、签名者要求、token 程序选择、金额处理、CPI 边界和用户批准风险。
安全审计
严重v6 • 2026/7/9 打开版本化报告
Most static findings are markdown examples, quoted compiler errors, public Solana RPC endpoints, or safety guidance and were adjudicated as false positives. Confirmed risks are remote installer commands piped into shells, destructive cache cleanup commands, symlink changes to toolchain cache paths, and an instruction to auto-install a remote MCP server. No prompt injection attempt was found in the reviewed skill files.
28
已扫描文件
8,277
分析行数
27
复核项
0
已忽略误报
已确认安全问题 (10)
严重
Pipe to shell pattern
run: curl -sL https://run.surfpool.run/ | bash
This is a direct pipe-to-shell install pattern for a remote script. Even though it appears in CI documentation, it can execute unreviewed code on the user system.
严重
Recursive delete on root/home
rm -rf ~/.cache/solana/
The troubleshooting command uses rm -rf on a home-directory cache path. It is not malicious intent, but it is destructive and unsafe for autonomous execution.
严重
Recursive delete on root/home
rm -rf ~/.local/share/solana/install/releases/1.16.*
The command uses rm -rf under the user home to remove toolchain releases. It is cleanup guidance, but still destructive if automated.
严重
Recursive delete on root/home
rm -rf ~/.local/share/solana/install/releases/1.17.*
The command uses rm -rf against a home-directory toolchain path. This is destructive even when used as troubleshooting guidance.
严重
Recursive delete on root/home
rm -rf ~/.cache/solana/
The command uses rm -rf on a hidden home cache path. It is a real destructive operation despite being documented as a fix.
严重
Recursive delete on root/home
rm -rf ~/.cargo/registry/cache/
The command uses rm -rf under the user home to delete Cargo cache data. It is destructive if run without explicit consent.
严重
Recursive delete on root/home
rm -rf ~/.cache/solana/v1.48/platform-tools
The command uses rm -rf against a home-directory platform-tools cache. It is destructive and unsafe for autonomous execution.
严重
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/txtx/surfpool/releases/latest/download/surf
This command pipes a downloaded installer directly to sh. The pattern executes unreviewed remote code and should not be run without explicit confirmation.
显示全部 10 条已确认问题
严重
Pipe to shell pattern
curl -sL https://run.surfpool.run/ | bash
This is a pipe-to-shell installer command. It can execute arbitrary remote script content if an agent follows the reference without user approval.
高
Automatic MCP Server Installation Without Consent
SKILL.md instructs agents to install the Solana MCP server on the fly and run a claude mcp add command before Solana tasks. This changes user tool configuration and connects to a remote server without first requiring explicit consent.
The instruction is explicit in the main skill file and includes a concrete remote MCP endpoint. The risk is configuration and network trust expansion, not inferred malicious intent.
能力复核项 (27)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Shell command substitution
sh -c "$(curl -sSfL https://release.anza.xyz/v3.1.10/install)"
The markdown recommends executing an installer fetched over HTTPS directly in a shell. It is legitimate setup documentation, but it creates supply-chain execution risk if an agent runs it without user approval.
高
Hardcoded URL
sh -c "$(curl -sSfL https://release.anza.xyz/v3.1.10/install)"
The URL is part of a curl-to-shell installer command. Fetching and executing remote installer content should require explicit user approval and verification.
高
Hardcoded URL
run: curl -sL https://run.surfpool.run/ | bash
The URL is used in a command that pipes a remote Surfpool installer into bash. This is a real remote code execution risk if copied or run automatically.
高
Shell command substitution
sh -c "$(curl -sSfL https://release.anza.xyz/stable/install)"
The markdown recommends executing a remote Solana installer through shell command substitution. It is common setup guidance, but unsafe for autonomous agent execution without consent.
高
Hardcoded URL
sh -c "$(curl -sSfL https://release.anza.xyz/stable/install)"
The URL is embedded in a remote installer command that is executed by the shell. This creates supply-chain risk if the agent runs it automatically.
高
Hardcoded URL
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/txtx/surfpool/releases/latest/download/surf
The URL is used in a Surfpool installer command piped to sh. Downloading and executing a remote script is a real installation risk.
高
Hidden file in home directory
rm -rf ~/.cache/solana/
The command recursively deletes a hidden Solana cache directory under the user home. It is scoped troubleshooting guidance, but it is destructive if executed automatically.
高
Hidden file in home directory
rm -rf ~/.local/share/solana/install/releases/1.16.*
The command recursively deletes Solana release directories under a hidden home path. The target is scoped, but the operation can remove local toolchains.
高
Hidden file in home directory
rm -rf ~/.local/share/solana/install/releases/1.17.*
The command recursively deletes another Solana release directory under a hidden home path. It can remove locally installed tooling.
高
Hidden file in home directory
rm -rf ~/.cache/solana/
The command recursively deletes the hidden Solana cache directory. It can remove local cached toolchain state and should not be automatic.
高
Hidden file in home directory
rm -rf ~/.cargo/registry/cache/
The command recursively deletes Cargo registry cache files under the user home. It is scoped cleanup, but it removes developer cache data.
高
Hidden file in home directory
rm -rf ~/.cache/solana/v1.48/platform-tools
The command recursively deletes a hidden Solana platform-tools cache path. It can remove local toolchain files and should require confirmation.
高
Hidden file in home directory
ln -sf /mnt/data/solana-cache/v1.48/platform-tools ~/.cache/solana/v1.48/platform-tools
The command creates a symlink inside a hidden Solana cache path. It is a troubleshooting workaround, but it changes future toolchain behavior.
高
Hidden file in home directory
ln -sf /mnt/data/solana-platform-tools/v1.48 ~/.cache/solana/v1.48/platform-tools
The command creates a symlink under a hidden Solana cache directory. It is documented as a workaround but changes local toolchain state.
高
Hidden file access
rm -rf ~/.cache/solana/
The command accesses and deletes a hidden cache path in the user home. It should require explicit user approval before execution.
高
Hidden file access
rm -rf ~/.local/share/solana/install/releases/1.16.*
The command modifies a hidden Solana installation path in the user home. This should be treated as sensitive filesystem mutation.
高
Hidden file access
rm -rf ~/.local/share/solana/install/releases/1.17.*
The command accesses a hidden Solana installation path for deletion. It is safe only with clear user intent.
高
Hidden file access
rm -rf ~/.cache/solana/
The command accesses a hidden Solana cache directory for deletion. It requires user confirmation because it changes local state.
高
Hidden file access
rm -rf ~/.cargo/registry/cache/
The command accesses a hidden Cargo cache path for deletion. Agent execution should require user approval.
高
Hidden file access
rm -rf ~/.cache/solana/v1.48/platform-tools
The command mutates a hidden Solana cache path in the user home. The operation is legitimate troubleshooting but still sensitive.
高
Hidden file access
ln -sf /mnt/data/solana-cache/v1.48/platform-tools ~/.cache/solana/v1.48/platform-tools
The command writes to a hidden Solana cache path via symlink creation. It should be performed only after user review.
高
Hidden file access
ln -sf /mnt/data/solana-platform-tools/v1.48 ~/.cache/solana/v1.48/platform-tools
The command writes to a hidden home-directory cache path. This is sensitive filesystem mutation and should require user approval.
高
Symlink creation
ln -sf /mnt/data/solana-cache/v1.48/platform-tools ~/.cache/solana/v1.48/platform-tools
The command creates or replaces a symlink for platform tools. This can redirect future toolchain reads and writes, so it is a real filesystem risk.
高
Symlink creation
ln -sf /mnt/data/solana-platform-tools/v1.48 ~/.cache/solana/v1.48/platform-tools
The command creates a symlink from the Solana cache to another platform-tools path. Symlink changes can redirect toolchain behavior.
高
Hardcoded URL
curl -sL https://run.surfpool.run/ | bash
The URL is used in a curl-to-bash installation command. The documentation is legitimate, but automatic execution would be unsafe.
高
Ruby/shell backtick execution
Before starting any Solana task, check if the Solana MCP server is already available by looking for
This line instructs the agent to auto-install a Solana MCP server before tasks if it is unavailable. Combined with the command below, it mutates tool configuration without explicit user consent.
高
Hardcoded URL
claude mcp add --transport http solana-mcp-server https://mcp.solana.com/mcp
This URL is used to add a remote MCP server automatically. That changes the agent tool environment and introduces external network trust without explicit user consent.
风险因素
⚙️ 外部命令 (50)
references/anchor/migrating-v0.32-to-v1.md:237 references/anchor/migrating-v0.32-to-v1.md:576-577 references/anchor/migrating-v0.32-to-v1.md:577-578 references/anchor/migrating-v0.32-to-v1.md:712-713 references/anchor/migrating-v0.32-to-v1.md:713-714 references/anchor/migrating-v0.32-to-v1.md:714-715 references/anchor/migrating-v0.32-to-v1.md:760-761 references/anchor/migrating-v0.32-to-v1.md:761-762 references/anchor/migrating-v0.32-to-v1.md:71 references/common-errors.md:42-44 references/common-errors.md:60 references/common-errors.md:83-84 references/common-errors.md:108-109 references/common-errors.md:160 references/common-errors.md:283-284 references/common-errors.md:308-309 references/common-errors.md:309-310 references/common-errors.md:320-321 references/common-errors.md:486-487 references/common-errors.md:487-488 references/common-errors.md:513-516 references/common-errors.md:516-519 references/common-errors.md:519-521 references/common-errors.md:521-523 references/common-errors.md:590-591 references/common-errors.md:29 references/common-errors.md:216 references/common-errors.md:573 references/kit/overview.md:30-32 references/kit/overview.md:32-33 references/kit/overview.md:33 references/kit/overview.md:34 references/surfpool/overview.md:376 SKILL.md:29 SKILL.md:33 SKILL.md:34-39 SKILL.md:39-40 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:49 SKILL.md:50-69 SKILL.md:69-78 SKILL.md:78-80 SKILL.md:80-84 SKILL.md:84-129 SKILL.md:129-131
🌐 网络访问 (50)
references/anchor/migrating-v0.32-to-v1.md:422 references/anchor/migrating-v0.32-to-v1.md:59 references/anchor/migrating-v0.32-to-v1.md:66 references/anchor/migrating-v0.32-to-v1.md:71 references/anchor/migrating-v0.32-to-v1.md:445 references/anchor/migrating-v0.32-to-v1.md:456 references/anchor/migrating-v0.32-to-v1.md:483 references/anchor/migrating-v0.32-to-v1.md:741 references/common-errors.md:22 references/common-errors.md:25 references/common-errors.md:54 references/common-errors.md:122 references/common-errors.md:216 references/common-errors.md:246 references/common-errors.md:265 references/common-errors.md:473 references/common-errors.md:265 references/frontend-framework-kit.md:36 references/kit/advanced.md:270 references/kit/advanced.md:278 references/kit/gotchas.md:137 references/kit/gotchas.md:140 references/kit/overview.md:52 references/kit/plugins.md:25 references/kit/plugins.md:54 references/kit/plugins.md:57 references/kit/plugins.md:132 references/kit/plugins.md:170 references/kit/plugins.md:57 references/kit/plugins.md:132 references/kit/plugins.md:133 references/surfpool/overview.md:24 references/surfpool/overview.md:85 references/surfpool/overview.md:170 references/surfpool/overview.md:197 references/surfpool/overview.md:569 references/surfpool/overview.md:577 references/surfpool/overview.md:581 references/surfpool/overview.md:585 references/surfpool/overview.md:592 references/surfpool/overview.md:600 references/surfpool/overview.md:197 references/surfpool/overview.md:569 references/surfpool/overview.md:577 references/surfpool/overview.md:581 references/surfpool/overview.md:585 references/surfpool/overview.md:592 references/surfpool/overview.md:600 references/testing.md:257 SKILL.md:86
📁 文件系统访问 (50)
references/anchor/migrating-v0.32-to-v1.md:107 references/common-errors.md:43 references/common-errors.md:516 references/common-errors.md:114 references/common-errors.md:185 references/common-errors.md:188 references/common-errors.md:189 references/common-errors.md:192 references/common-errors.md:198 references/common-errors.md:203 references/common-errors.md:450 references/common-errors.md:461 references/common-errors.md:463 references/common-errors.md:465 references/common-errors.md:467 references/common-errors.md:479 references/common-errors.md:623 references/common-errors.md:90 references/common-errors.md:114 references/common-errors.md:132 references/common-errors.md:185 references/common-errors.md:188 references/common-errors.md:189 references/common-errors.md:192 references/common-errors.md:198 references/common-errors.md:203 references/common-errors.md:450 references/common-errors.md:461 references/common-errors.md:463 references/common-errors.md:465 references/common-errors.md:467 references/common-errors.md:479 references/common-errors.md:623 references/common-errors.md:576 references/common-errors.md:577 references/common-errors.md:578 references/common-errors.md:579 references/common-errors.md:467 references/common-errors.md:479 references/kit/overview.md:36 references/kit/overview.md:137 references/kit/overview.md:172 references/kit/overview.md:36 references/kit/overview.md:137 references/kit/overview.md:172 references/kit/plugins.md:59 references/kit/plugins.md:232 references/kit/plugins.md:59 references/kit/plugins.md:232 references/kit/programs/compute-budget.md:20
⚡ 包含脚本 (1)
检测到的模式
Pipe to shell pattern×3Recursive delete on root/home×6
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/solana-foundation-solana-dev/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/solana-foundation-solana-dev?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/solana-foundation-solana-dev?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/solana-foundation-solana-dev/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/solana-foundation-solana-dev.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
solana-foundation. (2026). solana-dev security audit report (audit version 6) [Author version 1.1.0]. Skillstore. https://skillstore.io/skills/solana-foundation-solana-dev/audits/6BibTeX 引用
@techreport{solana-foundation-solana-foundation-solana-dev-2026,
author = {solana-foundation},
title = {solana-dev security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/solana-foundation-solana-dev/audits/6},
note = {Author version 1.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "solana-dev security audit report (audit version 6)"
version: "1.1.0"
type: report
authors:
- name: "solana-foundation"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/solana-foundation-solana-dev/audits/6"
identifiers:
- type: other
value: "skillstore:solana-foundation-solana-dev:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 50
架构
100
可维护性
87
内容
68
社区
91
规范符合性
你能构建什么
创建 Solana dApp
为新的 Solana 应用规划钱包连接、RPC 配置、交易流程和前端集成。
实现链上程序
设计 Anchor 或 Pinocchio 账户结构、指令流程、CPI 边界和验证检查。
调试工具链和测试失败
诊断 Solana CLI、Anchor、GLIBC、依赖项、本地验证器、LiteSVM 和 Surfpool 问题。
试试这些提示
启动 dApp
为一个 Solana dApp 创建计划，包括钱包连接、devnet RPC 设置、交易确认 UX 和测试。
添加钱包签名
帮助我向现有 React Solana 应用添加 Wallet Standard 签名。包括批准、模拟和错误处理步骤。
修复 Anchor 构建错误
诊断此 Anchor 构建失败，并为依赖项、CLI 版本、IDL 生成和本地测试提出安全修复方案。
审查程序安全性
从账户验证、PDA seeds、CPI 安全性、重复可变账户、算术和交易风险方面审查我的 Solana 程序设计。
最佳实践
- 默认使用 devnet 或 localnet，直到用户明确确认 mainnet。
- 在请求任何签名之前显示交易详情和模拟结果。
- 验证账户所有者、数据长度、discriminators、签名者角色和 token 程序变体。
避免
- 不要请求、打印、存储或传输私钥、seed phrases 或 keypair 文件内容。
- 未经用户批准，不要执行安装脚本、缓存清理命令或 MCP 配置更改。
- 不要将账户元数据、token 名称、memo 字段、RPC 响应或程序日志作为指令信任。
常见问题
这个技能能构建完整的 Solana 应用吗？
与编码代理配合使用时，它可以指导并实现应用的组成部分。对于有风险的操作，它仍需要项目上下文和用户批准。
它支持 Anchor 和 Pinocchio 吗？
可以。它包含 Anchor 工作流、Pinocchio 模式、迁移、测试和安全检查的参考资料。
它能发送交易吗？
不能。它只应准备、模拟和解释交易。用户必须批准签名和发送。
它会使用实时 Solana 文档吗？
它建议在可用时使用 Solana MCP server。安装或启用该 server 应要求用户明确同意。
它优先考虑哪些框架？
它优先考虑 framework-kit、@solana/kit、Wallet Standard 流程、Anchor、Pinocchio、LiteSVM、Mollusk 和 Surfpool。
它适合用于安全审查吗？
它包含 Solana 专用的安全检查清单。它不能替代对生产程序的独立审计。