diff --git a/submissions/solana-audit-skill.md b/submissions/solana-audit-skill.md new file mode 100644 index 0000000..31b131b --- /dev/null +++ b/submissions/solana-audit-skill.md @@ -0,0 +1,45 @@ +# solana-audit-skill + +## Links + +- Skill repo: https://github.com/Berektassuly/solana-audit-skill +- Solana AI Kit integration PR: https://github.com/solanabr/solana-ai-kit/pull/32 +- Superteam/X proof: https://x.com/Berektassuly/status/2068980428896423959 +- Canonical skill entry point: https://github.com/Berektassuly/solana-audit-skill/blob/main/skill/SKILL.md +- Demo: https://github.com/Berektassuly/solana-audit-skill/blob/main/DEMO.md +- Case studies: https://github.com/Berektassuly/solana-audit-skill/blob/main/CASE_STUDIES.md +- CI: https://github.com/Berektassuly/solana-audit-skill/actions + +## Summary + +`solana-audit-skill` is an audit-lifecycle skill for Solana builders and security reviewers. It helps turn source code, reports, transaction/payment boundaries, release evidence, remediation work, and formal-verification targets into defensible audit artifacts. + +## Problem It Solves + +Solana builders do not only need generic audit checklists. They need an agent skill that can guide a full review lifecycle: attack-surface mapping, evidence-backed findings, remediation verification, release gates, transaction/payment boundary review, formal-verification handoff, and final audit report generation. + +## Why It Fits Solana AI Kit + +- Follows the Solana AI Kit skill shape with a canonical `skill/SKILL.md`. +- Uses progressive, token-efficient routing into focused reference materials. +- Includes optional `agents/`, `commands/`, `rules/`, installer material, README, demo, case studies, and CI. +- Does not require paid APIs for default validation. +- Does not request or store private keys, seed phrases, wallet exports, or keypair file contents. +- MIT licensed and ready to be merged or submoduled. + +## Closest Adjacent Skills + +Adjacent skills include Trail of Bits skills, safe-solana-builder, GhostSecurity, QEDGen, solana-agent-transaction-safety, and solana-ship-gate. + +`solana-audit-skill` differs by covering the full audit lifecycle rather than only pre-audit review, one-off vulnerability checks, or transaction safety. + +## Validation + +```bash +cd tests +npm test +``` + +## Suggested Solana AI Kit Route + +`.claude/skills/ext/solana-audit/skill/SKILL.md`