Cauldron (Frostbite ModelKit)

Trust Score 42/100

CLI and workflow tools to prepare, upload, and run Frostbite on-chain AI models on Solana, including deterministic account lifecycle and on-chain inference test

triggers:cauldron initupload weightsseeded deterministic accountson-chain inferencefrostbite

GitHub SKILL.md

What it does

Provides a hands-on workflow for preparing AI models for on-chain execution with Frostbite on Solana. The skill documents CLI commands and sequences to initialize projects, convert and pack weights, build guest binaries, create deterministic seeded accounts, upload weights, and run on-chain inference (devnet). It also describes a TUI mode (Wizard/Manual), lifecycle helpers for account management, and guidance for invocation tuning and safety.

When to use it

Use this skill when you need to deploy or test a Frostbite-compatible model on Solana: setting up manifests, preparing weights, initializing seeded deterministic accounts, uploading binaries/weights, and running inference on devnet. It is also useful for developers debugging account lifecycle and upload/invoke flows.

What's included

Scripts: references to convenience scripts (e.g. cauldron-devnet-fastpath.sh, cauldron-seeded-cleanup.sh) are noted in the repo. (has_scripts=false in fetch output but repository includes docs/examples).
References: README and detailed docs (CAULDRON.md, FROSTBITE_MODEL_SPEC.md, FROSTBITE_GUEST_CONTRACT.md).
Instructions: step-by-step CLI examples for init, convert, build-guest, accounts init/create/clear/close, upload, program load, input-write, invoke, and output. Invocation tuning guidance for heavy/light templates is provided.

Compatible agents

Likely useful in developer-focused agents and CLI-capable assistants (Copilot/Codex/Cursor/Git-aware agents) that can run or explain shell workflows.

Audit Summary

The skill is marketed as a Solana Frostbite ModelKit tool but the actual SKILL.md body is a generic Skill Hub Manager that downloads and installs arbitrary skills from a remote registry. The skill instructs the agent to immediately execute $ARGUMENTS without asking, creating a shell injection risk. The install flow fetches unverified remote content and writes it to disk with no integrity checks. Metadata/body mismatch is a red flag — likely a bait-and-switch or poorly maintained entry.

Watch Out

SKILL.md body does not match the advertised Solana/Frostbite description — identity mismatch
Instructs agent to execute $ARGUMENTS without confirmation — shell injection vector
Downloads and writes remote content to disk without checksum verification
Fetches registry from kill136's GitHub repo — untrusted third-party source

Notes

Metadata describes a Solana on-chain ML tool but the actual content is a skill package manager. The auto-execute-$ARGUMENTS pattern is dangerous. Not quite malicious (security 42, above 40 threshold) but concerning. Would not recommend installing or using this skill.

Information

Repository: cauldron
Stars: 13
Installs: 0

Trust Score

Overall42

Security42

Code Quality45

Architecture38

Usefulness40

Related Skills

Readwise Reader Document Management

Manage Readwise Reader documents: list, save, search, move, tag, highlight, export and bulk-edit via official and custom CLIs.

Full Stack Builder

End-to-end builder that scaffolds, implements, tests, and optionally deploys web and API applications from a natural-language specification.

ezBookkeeping API Tools

Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi

Tmux Bridge

Give an agent controlled access to a local tmux terminal bridge so it can run shell commands, capture output, and manage sessions on the user's machine.

SourceSage CLI

Generate concise, LLM-friendly repository summaries (Markdown) using the SourceSage CLI — supports lite mode, language switching, and targeted repo analysis.

Nit (Nitter CLI)

Terminal client to browse tweets, view profiles, and search posts via Nitter instances without opening a browser.

hn — Hacker News CLI

Terminal-based Hacker News client with a CLI and optional interactive TUI for browsing top/new/best/ask/show/jobs stories, viewing threads with nested comments,

Lokalise Migration — Deep Dive

Step-by-step migration guide and tooling for moving translations from Crowdin/Phrase/POEditor into Lokalise, including transforms, uploads and validation.

Back to Skills