solana-dev
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs development tools from the official Anchor framework repository (coral-xyz/anchor) and utilizes standard GitHub Actions from the solana-labs organization for CI/CD automation.
- [COMMAND_EXECUTION]: Provides instructional commands for using standard Solana ecosystem CLI tools, including the Solana CLI and Anchor CLI, for program deployment, buffer management, and keypair generation.
- [COMMAND_EXECUTION]: References the use of third-party security auditing tools such as Soteria and Trident for vulnerability scanning and fuzz testing during the pre-deployment phase.
- [SAFE]: The skill hub structure correctly delegates specialized tasks (such as formal verification, security auditing, and infrastructure deployment) to dedicated submodule skills from recognized vendors.
- [SAFE]: Secret management follows industry best practices, utilizing environment variables for local configuration and GitHub Actions secrets for CI/CD pipeline security.
Audit Metadata