
from safe-solana-builder125
Scaffold and produce production‑grade Solana programs (Native Rust or Anchor) with built‑in security checks, test skeletons, and a comprehensive audit checklist
Safe Solana Builder generates secure, production-ready Solana program scaffolds and code guidance. It enforces a security-first workflow: asking framework/testing choices, loading reference security rules, classifying risk, gathering requirements, producing a full project scaffold, and producing tests and a security checklist. Every output emphasizes explicit account validation, panic safety, PDA bump hygiene, and upgrade/authority considerations.
Use this skill for any request to write or scaffold Solana on‑chain code: new programs, Anchor migrations, Native Rust implementations, security hardening of existing programs, or when a developer needs a production-ready starting point plus test coverage. Apply it for audits, CI-focused test setups, and high-risk financial programs.
examples/.Designed for Claude-style assistants that can author code and follow long-form procedural guidance; outputs are framework-agnostic (Anchor, Native Rust, Pinocchio) and include TypeScript/Rust test scaffolds as appropriate.
Safe Solana Builder is a comprehensive Solana program scaffolding skill that enforces security best practices derived from real protocol audits. It guides agents through framework selection, risk assessment, requirements gathering, and full project scaffolding with security checklists. No scripts were present to execute. The SKILL.md is exceptionally detailed with thorough vulnerability coverage but relies entirely on reference files in a references/ directory and examples/ that are not bundled, making it dependent on external content that may not be available to the agent.
Well-structured skill with excellent security guidance for Solana development. The SKILL.md content itself is thorough and well-organized. Main architectural concern: heavy reliance on unbundled reference files (references/shared-base.md, references/native-rust.md, etc.) and example directories that are not included in the skill payload — an agent using this skill may not have access to those files. No security issues found — no hardcoded credentials, no destructive commands, no exfiltration patterns, no phone-home telemetry. The skill promotes secure coding practices rather than introducing risks. Usefulness is limited to Solana developers, which is a specific/niche audience.