x402agent/solana-dev
skills/solana-dev-skill-main/skill/SKILL.md
End-to-end Solana development playbook (Jan 2026). Prefer Solana Foundation framework-kit (@solana/client + @solana/react-hooks) for React/Next.js UI. Prefer @solana/kit for all new client/RPC/transaction code. When legacy dependencies require web3.js, isolate it behind @solana/web3-compat (or @solana/web3.js as a true legacy fallback). Covers wallet-standard-first connection (incl. ConnectorKit), Anchor/Pinocchio programs, Codama-based client generation, LiteSVM/Mollusk/Surfpool testing, and security checklists.
$ install --global
skillsauthnpx skillsauth add x402agent/solana-clawd solana-devInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 2:10 AM36.0s10 files scanned
SKILL.md
- name:
- solana-dev
- description:
- End-to-end Solana development playbook (Jan 2026). Prefer Solana Foundation framework-kit (@solana/client + @solana/react-hooks) for React/Next.js UI. Prefer @solana/kit for all new client/RPC/transaction code. When legacy dependencies require web3.js, isolate it behind @solana/web3-compat (or @solana/web3.js as a true legacy fallback). Covers wallet-standard-first connection (incl. ConnectorKit), Anchor/Pinocchio programs, Codama-based client generation, LiteSVM/Mollusk/Surfpool testing, and security checklists.
- user-invocable:
- true
Solana Development Skill (framework-kit-first)
What this Skill is for
Use this Skill when the user asks for:
- Solana dApp UI work (React / Next.js)
- Wallet connection + signing flows
- Transaction building / sending / confirmation UX
- On-chain program development (Anchor or Pinocchio)
- Client SDK generation (typed program clients)
- Local testing (LiteSVM, Mollusk, Surfpool)
- Security hardening and audit-style reviews
Default stack decisions (opinionated)
- UI: framework-kit first
- Use
@solana/client+@solana/react-hooks. - Prefer Wallet Standard discovery/connect via the framework-kit client.
- SDK: @solana/kit first
- Prefer Kit types (
Address,Signer, transaction message APIs, codecs). - Prefer
@solana-program/*instruction builders over hand-rolled instruction data.
- Legacy compatibility: web3.js only at boundaries
- If you must integrate a library that expects web3.js objects (
PublicKey,Transaction,Connection), use@solana/web3-compatas the boundary adapter. - Do not let web3.js types leak across the entire app; contain them to adapter modules.
- Programs
- Default: Anchor (fast iteration, IDL generation, mature tooling).
- Performance/footprint: Pinocchio when you need CU optimization, minimal binary size, zero dependencies, or fine-grained control over parsing/allocations.
- Testing
- Default: LiteSVM or Mollusk for unit tests (fast feedback, runs in-process).
- Use Surfpool for integration tests against realistic cluster state (mainnet/devnet) locally.
- Use solana-test-validator only when you need specific RPC behaviors not emulated by LiteSVM.
Operating procedure (how to execute tasks)
When solving a Solana task:
1. Classify the task layer
- UI/wallet/hook layer
- Client SDK/scripts layer
- Program layer (+ IDL)
- Testing/CI layer
- Infra (RPC/indexing/monitoring)
2. Pick the right building blocks
- UI: framework-kit patterns.
- Scripts/backends: @solana/kit directly.
- Legacy library present: introduce a web3-compat adapter boundary.
- High-performance programs: Pinocchio over Anchor.
3. Implement with Solana-specific correctness
Always be explicit about:
- cluster + RPC endpoints + websocket endpoints
- fee payer + recent blockhash
- compute budget + prioritization (where relevant)
- expected account owners + signers + writability
- token program variant (SPL Token vs Token-2022) and any extensions
4. Add tests
- Unit test: LiteSVM or Mollusk.
- Integration test: Surfpool.
- For "wallet UX", add mocked hook/provider tests where appropriate.
5. Deliverables expectations
When you implement changes, provide:
- exact files changed + diffs (or patch-style output)
- commands to install/build/test
- a short "risk notes" section for anything touching signing/fees/CPIs/token transfers
Progressive disclosure (read when needed)
- UI + wallet + hooks: frontend-framework-kit.md
- Kit ↔ web3.js boundary: kit-web3-interop.md
- Anchor programs: programs-anchor.md
- Pinocchio programs: programs-pinocchio.md
- Testing strategy: testing.md
- IDLs + codegen: idl-codegen.md
- Payments: payments.md
- Security checklist: security.md
- Reference links: resources.md
Related Skills
x402agent/qedgen
development
VerifiedTrustedCommunity
Formally verify programs by writing Lean 4 proofs. Trigger this skill whenever the user wants to formally verify code, generate Lean 4 proofs, prove properties about algorithms or smart contracts, verify invariants, convert program logic into formal specifications, or anything involving Lean 4 and formal verification. Also trigger when the user mentions "qedgen", "lean proof", "formal proof", "verify my code", "prove correctness", "formal verification", or wants mathematical guarantees about their implementation.
15SKILL.mdUpdated Apr 19, 2026
x402agent/skills/swarm-orchestrator
data-ai
VerifiedTrustedCommunity
Orchestrate multi-bot trading swarms on Pump.fun with persona-driven agents
14SKILL.mdUpdated Apr 19, 2026
x402agent/skills/pumpfun-trading
tools
VerifiedTrustedCommunity
Buy and sell tokens on Pump.fun bonding curves and AMM pools
14SKILL.mdUpdated Apr 19, 2026
x402agent/skills/pumpfun-launcher
development
VerifiedTrustedCommunity
Launch new tokens on Pump.fun directly via the Pump SDK
14SKILL.mdUpdated Apr 19, 2026