solana-pass-fixture — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited solana-pass-fixture (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A textbook-safe Solana skill. Connects to two RPCs (Helius + QuickNode) for dual-source slot comparison, never inlines private keys, never combines nonce + authority operations.
import { Connection } from "@solana/web3.js";
const primary = new Connection("https://mainnet.helius-rpc.com/?api-key=REDACTED");
const fallback = new Connection("https://x402.quicknode.com/?token=REDACTED");
async function safeSlot(): Promise<number> {
const [a, b] = await Promise.all([primary.getSlot(), fallback.getSlot()]);
if (Math.abs(a - b) > 5) throw new Error("RPC providers disagree on slot");
return a;
}// Bounded at 50_000 microLamports — well under the 100k threshold.
ComputeBudgetProgram.setComputeUnitPrice({ microLamports: 50000 });const price = priceFeed.getPriceNoOlderThan(60);createApproveInstruction(account, TOKEN_PROGRAM_ID, BigInt("0xffffffffffffffff"));~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.