Safe Solana Builder

Use this skill whenever the user wants to write, scaffold, or build a Solana smart contract or program from scratch. Triggers on: "write a Solana program", "create a smart contract", "build an anchor program", "write a native Rust Solana program", "scaffold a Solana program", "help me write a program that does X on Solana", or any request to produce production-grade on-chain Solana code. This skill enforces Frank Castle's security best practices and pitfall avoidance guidelines automatically — giving every program a first layer of protection before it ever reaches an auditor. Always use this s

145 stars 24 forksWriting & Content

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add Frankcastleauditor/safe-solana-builder --skill safe-solana-builder

Manual install

git clone --depth 1 https://github.com/Frankcastleauditor/safe-solana-builder.git /tmp/safe-solana-builder
mkdir -p ~/.claude/skills
cp -r /tmp/safe-solana-builder/. ~/.claude/skills/safe-solana-builder

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Safe Solana Builder — by Frank Castle

You are writing production-grade Solana programs. Security is not an afterthought — it is baked into every line. Every program produced by this skill ships with a full project scaffold, a test file skeleton, and a security checklist.

### What This Skill Enforces

This skill systematically addresses the following vulnerability classes derived from real Solana protocol audits:

- **Protocol-specific vulnerabilities** — oracle manipulation, fee bypass, slippage attacks, LP preprocessing gaps
- **Logic flaws & edge cases** — dust DoS, time-unit mismatches, pre/post-fee inconsistencies, type narrowing
- **Access control & authorization bugs** — missing signer checks, frontrunnable initialization, namespace capture, inbound transfer auth, post-expiry flows
- **State management errors** — coupled-field resets, counter drift, vested/unvested balance separation, rollback safety
- **Lifecycle & state machine integrity** — absorbing terminal states, canonical transition matrices, paired time-gate divergence, user-param reachability constraints
- **PDA-related issues** — zombie accounts, seed collisions, canonical bump enforcement, lifecycle closure
- **Reward accounting exploits** — rounding gaps in partial unstake, dual-path reward debt bypass, retroactive rate application, dead share price, inflation/first-depositor attack, fee-on-transfer delta errors, rewards sourced from principal

Read the full skill on GitHub

Details

Skill name: safe-solana-builder
Repository: Frankcastleauditor/safe-solana-builder
Repo updated: 5 October 2026

FAQ

What does the Safe Solana Builder skill do?

How do I install the Safe Solana Builder skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add Frankcastleauditor/safe-solana-builder --skill safe-solana-builder. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Safe Solana Builder popular?

It lives in Frankcastleauditor/safe-solana-builder, which has 145 GitHub stars and 24 forks.

Related skills

Good Story

143

Rimagination/good-story

Use when the user asks to find, sharpen, evaluate, rewrite, or explain the story in scientific or scholarly materials across disciplines, including manuscripts, grants, paper outlines, abstracts, figures, results, discussions, cover letters, research pitches, high-impact writing, journal fit, significance, novelty, mechanism, paper logic, or why a result matters.

Writing & Content17

Tianming Novel System

159

zy-zmc/tianming-skill

「天命」长篇小说协同创作系统。当用户使用「天命：大纲」「天命：规划」「天命：目录」「天命：草案」「天命：正文」「天命：体检」「天命：存档」等指令进行多卷长篇小说写作，或需要保证跨章节的世界观一致性、伏笔回收、节奏控制、文风稳定时使用本 Skill。本系统依赖外部知识库：《世界基石.md》《世界观规则.md》《角色档案.md》《档案事件.md》《文风样本.md》。

Writing & Content36

Iso 24495

154

danyuchn/iso-24495-skill

Use when text must be easy for its intended reader to find, understand, and act on — reports, emails, documentation, UI text, announcements, explanations, AI output that reads as dense or bureaucratic. Applies ISO 24495-1 plain language principles with dedicated technique layers for English and Traditional Chinese. Triggers: plain language rewrite, apply ISO 24495, make this clearer for readers, de-jargon this, 淺白改寫, 白話改寫, 去公文腔, 讓讀者一次看懂. Not for creative or literary writing.

Writing & Content

Brewreel

177

Finderchangchang/brewreel

精酿 · BrewReel：四种玩法。宣传片：做竖版产品宣传短片（1080x1920，15–45 秒，抖音/视频号/小红书）。用户要做产品宣传片、推广短视频、App 介绍视频、功能演示视频、上新短片、带货片头时使用。支持软件、餐饮、电商实物、教培、美业、文旅住宿六个行业，支持中英双语。你只写 storyboard.json，校验拦规则和行业合规，一条命令出片。口播配画面：用户有 talk.mp4，或要给口播配画面时，只读 broll/SKILL-broll.md，只写 broll.json，跑 node scripts/talk.mjs，不要写 storyboard.json。造 AI 画面风格：用户用一句话描述画面风格时，读 docs/style-factory.md，跑 node scripts/broll/new-style.mjs，不要自己出图，不要替人跑 approve-style.mjs。讲课视频：用户要做讲解课、课程、普法、教程类横版视频时，只读 lesson/SKILL-lesson.md，只写 lesson.json（或 brief），跑 node scripts/lesson/make-lesson.mjs。

Writing & Content22

Oil Subtitle

126

oil-oil/oil-subtitle

为本地 MP4、MOV 等视频转录、校对、预览并烧录准确的中文字幕，或把审校后的中文字幕翻译成同时间轴的英文 SRT。用户只要提供成片视频并要求加字幕、修字幕、生成 SRT/ASS、字幕进度条或英文字幕，就使用本 Skill。不要用它修改 .screenstudio 工程时间线；工程剪辑使用 screen-studio-editor。

Writing & Content15

Xhs Writer

180

JuneYaooo/xhs-writer-skill

生成小红书(RedNote)笔记：把主题或用户提供的素材(文字/图片/视频)做成一套竖版卡片(图文) 或一段带分镜脚本的视频稿(视频)，配 caption + hashtags，落盘到 output/小红书/。使用时机：用户说写小红书 / 做小红书笔记 / 小红书图文 / 小红书种草 / 出一套 xhs 卡片 / 小红书视频 / write a Xiaohongshu note / make a RedNote post。

Writing & Content22

Browse the most popular Claude skills, all writing & content skills, or write your own with the skills generator.