sos

Solid

Stronghold of Security: Comprehensive adversarial security audit for Solana/Anchor smart contracts. Run /SOS for a getting-started guide, or /SOS:scan to begin an audit.

Code & Development 15 stars 2 forks Updated 2 months ago MIT

Install

View on GitHub

Quality Score: 81/100

Stars 20%
40
Recency 20%
75
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

<!-- SVK Version Check — runs once per session on first skill invocation --> <svk-version-check> **On first invocation this session**, silently perform a version check: 1. Look for `.claude/svk-meta.json` in the current project. If it doesn't exist, skip this check entirely. 2. Read the `svk_repo` path and `installed_version` from the metadata file. 3. Run: `git -C <svk_repo> fetch --tags --quiet 2>/dev/null` 4. Run: `git -C <svk_repo> tag --sort=-v:refname | head -1` to get the latest tag. 5. Compare the installed version against the latest tag (strip the leading `v`). 6. If they match, skip — the user is up to date. 7. If the latest tag is newer, show this message ONCE (never repeat in this session): > **SVK Update Available:** v{latest} is available (you're on v{installed}). > - **Update now:** I can pull and reinstall the changed skills in this session > - **Update later:** Start a new chat and run `/SVK:update` 8. If the git commands fail (offline, repo moved, etc.), skip silently. Never show errors from version checking. **Important:** Do NOT block or delay the user's actual command. Perform this check, show the notification if needed, then proceed with the command they invoked. </svk-version-check> # Stronghold of Security A comprehensive, multi-agent adversarial security audit pipeline for Solana/Anchor smart contracts. > *"The best defense is a thorough offense."* --- ## Getting Started Stronghold of Security runs as a multi-phase pipeline. Each phase is a ...

Details

Author
MetalLegBob
Repository
MetalLegBob/solana-vibes-kit
Created
3 months ago
Last Updated
2 months ago
Language
JavaScript
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

Data & Documents Solid

scv-scan

Systematically audit Solidity smart contract codebases for security vulnerabilities using a 4-phase approach - load a vulnerability cheatsheet, sweep code with grep and semantic analysis, deep-validate candidates against reference files, and output a severity-ranked findings

99 Updated 2 months ago
kadenzipfel
Code & Development Listed

code-security-review

AI-driven code security review skill. Provides a complete methodology for conducting security audits on source code, including: security audit prompts, false positive filtering rules (hard exclusions + AI-based filtering), severity/confidence scoring guidelines, and customizable scan/filter instructions. Supports all programming languages.

18 Updated 1 months ago
ez-lbz
AI & Automation Listed

skill-vetter

Multi-scanner security gate. TRIGGER when: user mentions installing, adding, or reviewing a skill to Claude Code, OpenClaw, or any other AI agent. Detects malicious code, vulnerabilities, and suspicious patterns.

32 Updated 2 months ago
app-incubator-xyz
Code & Development Featured

security-reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.

9,342 Updated 5 days ago
Jeffallan
DevOps & Infrastructure Listed

code-audit

Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages: Java, Python, Go, PHP, JavaScript/Node.js, C/C++, .NET/C#, Ruby, Rust. Includes 143 mandatory detection items across all languages with language-specific checklists. Covers SQL injection, XSS, RCE, deserialization, SSRF, JNDI injection, JDBC protocol injection, authentication bypass, business logic flaws, race conditions, and modern security domains (LLM, Serverless, Android). WooYun integration adds: statistical-driven parameter priority, bypass techniques library, logic vulnerability patterns, and real-case references. v1.0: Initial public release with Docker deployment verification framework.

704 Updated 3 months ago
3stoneBrother