CPI Risk

Forked from Trail of Bits Solana security skills. Original category alignment: arbitrary CPI, sysvar account checks, and improper instruction introspection. Modified by Sealevel Guard and distributed as skill text under CC BY-SA 4.0.

Cross-program invocation risk review skill.

Purpose

Detect whether the program can invoke the wrong program, propagate too much privilege, or trust unsafe callback behavior.

Focus

This skill is responsible for: