Sato Hub
← Skills

solana-auditskills.sh · workersio

132 installs

>-

Generates or handles private keysAsks the user to paste a credentialGrants itself unrestricted tools
Hosts contacted: www.anchor-lang.comsolana.com
Credentials it expects: GOVERNANCE_KEY
Evidence lines
  • generates_or_handles_keys — references/exploit-case-studies.md: ## 6. Slope Wallet — Private Key Leak (August 2022)
  • solicits_credentials — references/CHEATSHEET.md: **Grep:** Division in share/LP token calculations without zero-amount guard
  • solicits_credentials — references/exploit-case-studies.md: - Look for division in share/LP token calculations
  • solicits_credentials — references/rounding-errors.md: Integer division in share/LP token calculations can round to zero, enabling a class of drain attacks first documented by Neodyme. When a deposit is too small to
  • solicits_credentials — references/rounding-errors.md: # Find share/LP token calculations
  • solicits_credentials — references/rounding-errors.md: 1. **Find all share/LP token minting calculations**: Look for `deposit_amount * total_shares / total_value` patterns
  • broad_tool_grant — SKILL.md: allowed-tools: Read, Write, Glob, Grep, Agent, Bash(grep *), Bash(wc *)

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/workersio/skills/solana-audit. Targets solana-foundation-mcp.

Install

npx skills add workersio/skills@solana-audit

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

2 weekly observations since 2026-09-07. Installs 132 → 132.

The skill's content hash has not changed while we watched.

Cite this page

Sato Hub. "solana-audit — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Aworkersio%2Fskills%2Fsolana-audit

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.