Solana Security & Mainnet — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Solana Security & Mainnet (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill provides security guidance and helps users understand the risks and safeguards when working with blockchain networks, especially mainnet operations involving real value.
Always test on devnet before mainnet. Devnet has:
Practice: Test every workflow on devnet before attempting mainnet.
When moving to testnet or mainnet:
Why: Addresses can be wrong, contracts can have bugs, mistakes happen. Small amounts limit damage.
Before sending anything:
Common mistake: Typo in address = funds lost forever (blockchain transactions can't be reversed).
Your private key is like your password and PIN combined:
If someone has your private key, they control your funds.
Create separate wallets for different purposes:
Why: Limits damage if a wallet is compromised or lost.
Know what you're paying:
Before mainnet: Ensure you have enough SOL for fees plus the actual transfer.
| Aspect | Devnet | Testnet | Mainnet |
|---|---|---|---|
| Real value | No | No | YES |
| Get SOL | Free airdrop | Faucet | Purchase/earn |
| Behavior | Matches mainnet | Nearly mainnet | Production |
| Reset | Occasional | Rare | Never |
| Best for | Learning | Testing | Real operations |
| Risk | Zero | Very low | HIGH |
Recommendation for non-technical users:
/solana-accept-riskThis plugin requires explicit risk acceptance before mainnet operations because:
By running /solana-accept-risk, you confirm:
No real loss possible, good for learning
Real loss possible but limited by amount. Test with tiny amounts first.
Large loss possible. Expert knowledge required.
Before running any mainnet operation, verify:
/solana-accept-risk and accepted the terms/solana-network)If any box is unchecked, don't proceed.
| Mistake | How to Avoid |
|---|---|
| Sending to wrong address | Copy/paste carefully, verify first 4 & last 4 chars, test with small amount |
| Insufficient balance | Check balance with /solana-network before sending |
| Lost private key | Use hardware wallet, write down seed phrase, store securely |
| Mainnet without testing | Always test on devnet first, multiple times |
| Huge transfer amount | Start small, verify it works, then increase |
| Using new contracts | Stick to established programs, avoid brand new ones |
| Not reading prompts | Read every message Claude sends, confirm details |
Always ask Claude to "simulate this transaction first" before executing:
Pattern:
1. User: "Simulate transferring 0.1 SOL to [address]"
2. Claude: [Shows what will happen]
3. User: "Looks good, execute the transfer"
4. Claude: [Executes and confirms]For serious mainnet use, consider a hardware wallet:
For large amounts, use multi-signature wallets:
Reach out to support if you:
Watch out for:
If something feels wrong, it probably is.
If you sent to the wrong address:
If you lost your private key:
If you think your key was stolen:
Use Devnet When:
Use Testnet When:
Use Mainnet When:
/solana-accept-riskBlockchain is powerful but permanent. Mistakes can't be fixed. The responsibility is 100% on you:
Your funds = Your responsibility. Take it seriously.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.