solana-anchor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as a technical reference library for the Anchor framework. All content is educational and instructional for developers.
- [INDIRECT_PROMPT_INJECTION]: This category flags the ingestion surface for untrusted data. 1. Ingestion points: The skill documents processing of IDL JSON files, Anchor.toml configs, and Rust source code (documented in core-idl.md and references-anchor-toml.md). 2. Boundary markers: The framework uses IDL-based account resolution and discriminator checks to delimit data. 3. Capability inventory: The skill documents the use of the Anchor CLI (build, test, deploy) which involves subprocess execution and file system writes. 4. Sanitization: The skill highlights Anchor's built-in account validation and security constraints as the primary defense mechanism against malicious data input.
- [EXTERNAL_DOWNLOADS]: The documentation references official tools and libraries like the Anchor CLI (via AVM), Docker images from the Solana Foundation, and standard package registries (NPM, PyPI, Crates.io). These are all well-known, trusted sources in the Solana development ecosystem.
Audit Metadata