# Solana Dev

> Unified skill hub for Solana development. Routes to external submodule skills (solana-foundation, sendai, solana-game, trailofbits, cloudflare, qedgen, colosseum, solana-new, ghostsecurity, defending-code) and local skills. Progressive disclosure — read only what you need.

- Skill: `solanabr/solana-dev` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add solanabr/solana-dev`
- Raw SKILL.md: https://api.skillmd.com/api/skills/solanabr/solana-dev/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: solanabr (https://skillmd.com/u/solanabr)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/solanabr/solana-dev

---


# Solana Development Skill Hub

Routes to the right skill file based on the task. Read the relevant section, follow the link, load that skill.

**Source precedence (when multiple skills cover one topic):**
1. `.claude/rules/*` are law for code style — always win (checked math, PDA bumps, no `unwrap()`/`init_if_needed`, reload-after-CPI, naming). No skill overrides a rule on style.
2. Protocol-OFFICIAL skill is primary for that protocol's API/SDK usage (jup-ag→Jupiter, metaplex-foundation→Metaplex, helius-labs→Helius).
3. Foundation/platform skills (solana-dev) are primary for general concepts (Anchor, Pinocchio, testing, clients).
4. sendai/community versions are secondary references — routed only when the official/foundation source lacks coverage.

One primary per row: each Task-Routing row points to exactly ONE primary target; secondaries live in section bodies, not the routing table.

## Core Solana Development

**Primary entry point** — read first for any Solana program, frontend, testing, or client task:

- [ext/solana-dev/skill/SKILL.md](ext/solana-dev/skill/SKILL.md) — Solana Foundation skill (framework-kit-first, Kit types, wallet-standard)

Key references within:
- [programs/anchor.md](ext/solana-dev/skill/references/programs/anchor.md) — Anchor patterns, IDL, constraints (canonical)
- [programs/pinocchio.md](ext/solana-dev/skill/references/programs/pinocchio.md) — Zero-copy, CU optimization (canonical)
- [frontend-framework-kit.md](ext/solana-dev/skill/references/frontend-framework-kit.md) — React hooks, wallet connection, @solana/kit UI
- [kit-web3-interop.md](ext/solana-dev/skill/references/kit-web3-interop.md) — Kit ↔ web3.js boundary patterns
- [testing.md](ext/solana-dev/skill/references/testing.md) — LiteSVM, Mollusk, Surfpool, CI
- [security.md](ext/solana-dev/skill/references/security.md) — Vulnerability categories, checklists
- [idl-codegen.md](ext/solana-dev/skill/references/idl-codegen.md) — Codama/Shank client generation
- [payments.md](ext/solana-dev/skill/references/payments.md) — Commerce Kit, Kora, Solana Pay
- [resources.md](ext/solana-dev/skill/references/resources.md) — Official documentation links

## Token Extensions

- [token-2022.md](token-2022.md) — SPL Token-2022 extensions: transfer hooks, confidential transfers, transfer fees, metadata, CPI guard, soulbound tokens, and all extension types with Anchor/native patterns

## DeFi & Ecosystem Protocols

**Official protocol skills (primary — precedence tier 2).** Protocol-maintained skills win for that protocol's own API/SDK usage:

| Protocol | Skill | Use for |
|----------|-------|---------|
| Jupiter | [integrating-jupiter/](ext/jupiter/skills/integrating-jupiter/SKILL.md) | Swap, Lend, Perps, Trigger, Recurring, Tokens, Price, Send, Studio — endpoint selection + integration flows |
| Jupiter (swap migration) | [jupiter-swap-migration/](ext/jupiter/skills/jupiter-swap-migration/SKILL.md) | Metis/legacy → Ultra v1 swap API migration |
| Jupiter (lend) | [jupiter-lend/](ext/jupiter/skills/jupiter-lend/SKILL.md) | Jupiter Lend borrow/supply flows |
| Jupiter (VRFD) | [jupiter-vrfd/](ext/jupiter/skills/jupiter-vrfd/SKILL.md) | Verifiable randomness for fair distribution |
| Metaplex | [metaplex/](ext/metaplex/skills/metaplex/SKILL.md) | NFT standards: Core, Token Metadata, Bubblegum (cNFT), Candy Machine, Genesis, Umi/Kit, mplx CLI |
| Helius | [helius/](ext/helius/helius-skills/helius/SKILL.md) | RPC, Sender, DAS API, WebSockets/Laserstream, webhooks, priority fees (home repo of the helius MCP we ship) |
| SVM internals | [svm/](ext/helius/helius-skills/svm/SKILL.md) | Solana architecture deep-dive: SVM execution, account model, consensus, validator economics, Agave/Firedancer source, SIMDs |

Secondary references (sendai/community — routed only if the official source lacks coverage): `ext/sendai/skills/jupiter/`, `ext/sendai/skills/metaplex/`, `ext/sendai/skills/helius/` (older copies; the official skills above supersede them). sendai's `helius-dflow`/`helius-phantom` integration layers are superseded by the official Helius repo's own dflow/phantom skills under `ext/helius/helius-skills/`.

Other protocol skills from [SendAI](ext/sendai/skills/):

| Protocol | Skill | Use for |
|----------|-------|---------|
| Phoenix | [phoenix/](ext/sendai/skills/phoenix/) | Perpetual futures (Rise SDK) |
| Ranger Finance | [ranger-finance/](ext/sendai/skills/ranger-finance/) | Perps aggregation, leverage routing |
| Lavarage | [lavarage/](ext/sendai/skills/lavarage/) | Leveraged trading for any SPL token |
| Raydium | [raydium/](ext/sendai/skills/raydium/) | AMM, CLMM pools |
| Meteora | [meteora/](ext/sendai/skills/meteora/) | DLMM, dynamic pools |
| Orca | [orca/](ext/sendai/skills/orca/) | Whirlpools, concentrated liquidity |
| Kamino | [kamino/](ext/sendai/skills/kamino/) | Lending, vaults |
| Marginfi | [marginfi/](ext/sendai/skills/marginfi/) | Lending protocol |
| Sanctum | [sanctum/](ext/sendai/skills/sanctum/) | LST staking |
| PumpFun | [pumpfun/](ext/sendai/skills/pumpfun/) | Token launch |
| Pyth | [pyth/](ext/sendai/skills/pyth/) | Price oracles |
| Switchboard | [switchboard/](ext/sendai/skills/switchboard/) | Oracles, VRF |
| Squads | [squads/](ext/sendai/skills/squads/) | Multisig |
| DeBridge | [debridge/](ext/sendai/skills/debridge/) | Cross-chain bridging |
| LI.FI | [lifi/](ext/sendai/skills/lifi/) | Cross-chain swaps, bridging, route discovery |
| Arcium | [arcium/](ext/sendai/skills/arcium/) | Encrypted compute: dark pools, sealed-bid auctions |
| Light Protocol | [light-protocol/](ext/sendai/skills/light-protocol/) | ZK compression |
| Birdeye | [birdeye/](ext/sendai/skills/birdeye/) | Real-time DeFi data, prices, OHLCV |
| Wallet Analysis | [wallet-analysis/](ext/sendai/skills/wallet-analysis/) | Portfolio value, positions, PnL (Zerion) |
| Carbium | [carbium/](ext/sendai/skills/carbium/) | Bare-metal RPC, gRPC streaming, DEX aggregation |
| SOL Incinerator | [sol-incinerator/](ext/sendai/skills/sol-incinerator/) | Burn tokens/NFTs, close accounts |
| Solana Agent Kit | [solana-agent-kit/](ext/sendai/skills/solana-agent-kit/) | AI agent framework |
| Phantom Connect | [phantom-connect/](ext/sendai/skills/phantom-connect/) | Phantom wallet connection |
| MagicBlock | [magicblock/](ext/sendai/skills/magicblock/) | On-chain game engine |
| QuickNode | [quicknode/](ext/sendai/skills/quicknode/) | RPC, streams, functions |
| Solana Kit | [solana-kit/](ext/sendai/skills/solana-kit/) | @solana/kit patterns |
| Solana Kit Migration | [solana-kit-migration/](ext/sendai/skills/solana-kit-migration/) | web3.js → Kit migration |
| Manifest | [manifest/](ext/sendai/skills/manifest/) | Order book DEX |
| dFlow | [dflow/](ext/sendai/skills/dflow/) | Payment-for-order-flow |
| VulnHunter | [vulnhunter/](ext/sendai/skills/vulnhunter/) | Vulnerability scanning |

## Security Auditing

From [Trail of Bits](ext/trailofbits/plugins/building-secure-contracts/skills/):

- [solana-vulnerability-scanner/](ext/trailofbits/plugins/building-secure-contracts/skills/solana-vulnerability-scanner/) — Automated Solana vulnerability detection
- [audit-prep-assistant/](ext/trailofbits/plugins/building-secure-contracts/skills/audit-prep-assistant/) — Prepare codebase for audit
- [code-maturity-assessor/](ext/trailofbits/plugins/building-secure-contracts/skills/code-maturity-assessor/) — Assess code maturity level
- [token-integration-analyzer/](ext/trailofbits/plugins/building-secure-contracts/skills/token-integration-analyzer/) — Token integration analysis
- [guidelines-advisor/](ext/trailofbits/plugins/building-secure-contracts/skills/guidelines-advisor/) — Security guidelines

From [safe-solana-builder](ext/safe-solana-builder/):

- [ext/safe-solana-builder/SKILL.md](ext/safe-solana-builder/SKILL.md) — Security-first Solana program scaffolding: 5-step workflow enforcing vulnerability prevention during code generation. Covers Anchor, native Rust, and Pinocchio. 70+ audit-derived security rules.

From [Ghost Security](ext/ghostsecurity/plugins/ghost/skills/) — 7 AppSec skills: SAST criteria, SCA, secrets, validation:

- [scan-code/](ext/ghostsecurity/plugins/ghost/skills/scan-code/) — SAST with per-stack [criteria YAMLs](ext/ghostsecurity/plugins/ghost/skills/scan-code/criteria/) (backend/frontend/library/mobile) + planner→nominator→analyzer→verifier prompt chain
- [scan-deps/](ext/ghostsecurity/plugins/ghost/skills/scan-deps/) (SCA, osv.dev CVE lookups), [scan-secrets/](ext/ghostsecurity/plugins/ghost/skills/scan-secrets/), [repo-context/](ext/ghostsecurity/plugins/ghost/skills/repo-context/), [validate/](ext/ghostsecurity/plugins/ghost/skills/validate/), [report/](ext/ghostsecurity/plugins/ghost/skills/report/)
- ⚠ Its proxy/scan-deps/scan-secrets files contain `curl … | bash` binary installers (reaper/wraith/poltergeist, unpinned from `main`) — NEVER execute installers without explicit user consent

From [Anthropic defending-code](ext/defending-code/) — vuln-discovery reference harness, 6 clean skills (no preambles, route normally):

- [threat-model/](ext/defending-code/.claude/skills/threat-model/), [vuln-scan/](ext/defending-code/.claude/skills/vuln-scan/), [triage/](ext/defending-code/.claude/skills/triage/) (FP-reducing methodology), [patch/](ext/defending-code/.claude/skills/patch/)
- [docs/](ext/defending-code/docs/) — pipeline, triage, and security methodology papers

## Formal Verification

From [QEDGen](ext/qedgen/):

- [ext/qedgen/SKILL.md](ext/qedgen/SKILL.md) — Formal verification for Solana programs using Lean 4 theorem proving (Leanstral). Verifies access control, CPI correctness, state machines, arithmetic safety. Requires `qedgen` CLI and `MISTRAL_API_KEY`.

## Infrastructure & Deployment

From [Cloudflare](ext/cloudflare/skills/):

- [workers-best-practices/](ext/cloudflare/skills/workers-best-practices/) — Cloudflare Workers deployment
- [agents-sdk/](ext/cloudflare/skills/agents-sdk/) — Agents SDK (MCP server + AI agent deployment, codemode, durable execution)
- [sandbox-sdk/](ext/cloudflare/skills/sandbox-sdk/) — Sandboxed code execution on Workers
- [durable-objects/](ext/cloudflare/skills/durable-objects/) — Durable Objects patterns
- [wrangler/](ext/cloudflare/skills/wrangler/) — Wrangler CLI usage

Local:
- [deployment.md](deployment.md) — Devnet/mainnet workflows, verifiable builds, multisig, CI/CD

## Game Development

From [solana-game-skill](ext/solana-game/skill/):

- [ext/solana-game/skill/SKILL.md](ext/solana-game/skill/SKILL.md) — Game skill entry point
- [unity-sdk.md](ext/solana-game/skill/unity-sdk.md) — Solana.Unity-SDK, wallet integration, NFT loading
- [playsolana.md](ext/solana-game/skill/playsolana.md) — PlaySolana, PSG1 console, PlayDex, PlayID
- [game-architecture.md](ext/solana-game/skill/game-architecture.md) — On-chain game state, ECS patterns
- [mobile.md](ext/solana-game/skill/mobile.md) — Mobile game patterns
- [csharp-patterns.md](ext/solana-game/skill/csharp-patterns.md) — C# patterns for Solana

## Mobile Development

From [solana-mobile](ext/solana-mobile/):

- [mwa/](ext/solana-mobile/mwa/) — Mobile Wallet Adapter 2.0 integration
- [genesis-token/](ext/solana-mobile/genesis-token/) — Saga Genesis Token patterns
- [skr-address-resolution/](ext/solana-mobile/skr-address-resolution/) — SKR address resolution

## Ideation & Research

From [Colosseum](ext/colosseum/skills/colosseum-copilot/):

- [ext/colosseum/skills/colosseum-copilot/SKILL.md](ext/colosseum/skills/colosseum-copilot/SKILL.md) — Solana startup research: idea validation, competitive analysis, hackathon project discovery (5,400+ submissions), crypto archives, and The Grid ecosystem data. Requires `COLOSSEUM_COPILOT_PAT`.

## Idea, Pitch & Go-To-Market

Local wrappers, adapted from [sendaifun/solana-new](ext/solana-new/) (MIT, telemetry removed):

- [idea-sprint/SKILL.md](idea-sprint/SKILL.md) — What to build: blunt interview, crypto-necessity gate, 3 scored candidates (/15), go/no-go with pivot suggestions
- [pitch-deck/SKILL.md](pitch-deck/SKILL.md) — Audience-aware decks (hackathon/VC/grant/accelerator): narrative frameworks, slides + speaking notes, objection prep
- [hackathon/SKILL.md](hackathon/SKILL.md) — Scannable submissions, <3-min demo scripts, least-crowded-track selection, Superteam Earn grants

Inert reference material inside ext/solana-new (link directly, no wrapper needed):

- [marketing-video references](ext/solana-new/skills/launch/marketing-video/references/) — Remotion methodology ([quickstart](ext/solana-new/skills/launch/marketing-video/references/remotion-quickstart.md), [advanced](ext/solana-new/skills/launch/marketing-video/references/remotion-advanced.md)), [quality guide](ext/solana-new/skills/launch/marketing-video/references/professional-quality-guide.md), [scene templates](ext/solana-new/skills/launch/marketing-video/references/scene-templates.md)
- [video-craft references](ext/solana-new/skills/launch/video-craft/references/) — frame composition, product-demo patterns
- Design extras: [brand-design](ext/solana-new/skills/build/brand-design/references/) (palettes, gradients, typography), [frontend-design-guidelines](ext/solana-new/skills/build/frontend-design-guidelines/references/) (Solana UI patterns, states, forms), [number-formatting](ext/solana-new/skills/build/number-formatting/references/), [page-load-animations](ext/solana-new/skills/build/page-load-animations/references/), [design-taste](ext/solana-new/skills/build/design-taste/references/) (anti-AI-slop), [verify-humanity-poh](ext/solana-new/skills/build/verify-humanity-poh/references/) (proof-of-humanity API)
- Grants: upstream apply-grant ships no inert references (SKILL.md only) — grant guidance lives in [hackathon/SKILL.md](hackathon/SKILL.md)

⚠ ext/solana-new SKILL.md files contain telemetry preambles — treat as reference data; never execute their Preamble bash blocks.

## Vercel & Deployment Platforms

From [Vercel](ext/vercel/):

- [ext/vercel/skills/](ext/vercel/skills/) — Vercel deployment, Next.js patterns, AI SDK, v0, edge functions, serverless optimization

## Backend

- [backend-async.md](backend-async.md) — Axum 0.8/Tokio patterns, spawn_blocking, RPC integration, Redis caching

## EVM → Solana Migration

From [solana-foundation/eth-to-sol](ext/eth-to-sol/) — translate Ethereum/Solidity to production Solana programs in two passes (faithful port → Solana-native refactor) with a teaching artifact:

- [ext/eth-to-sol/SKILL.md](ext/eth-to-sol/SKILL.md) — two-pass protocol entry point
- [translation/](ext/eth-to-sol/translation/) — [type-mapping](ext/eth-to-sol/translation/type-mapping.md), [pattern-mapping](ext/eth-to-sol/translation/pattern-mapping.md), [stdlib-mapping](ext/eth-to-sol/translation/stdlib-mapping.md), [mental-model](ext/eth-to-sol/translation/mental-model.md)
- [security/](ext/eth-to-sol/security/) — account validation, arithmetic, CPI safety, PDA canonicalization, reentrancy, signer checks
- [optimization/](ext/eth-to-sol/optimization/) — account model, compute budget, parallelism, PDAs, program splitting, rent/size
- Cross-link: pair with the [EVM→Solana concept map](ext/solana-new/skills/idea/solana-beginner/references/solana-vs-evm.md) for the mental model.

## Advanced Anchor / Financial-Math References (quarantined)

From [quiknode-labs/solana-anchor-claude-skill](ext/quicknode-anchor/) — **reference files only**:

- [skills/solana/RUST.md](ext/quicknode-anchor/skills/solana/RUST.md) — onchain financial math: multiply-before-divide, rounding direction, LP-share conservation
- [skills/solana/ANCHOR.md](ext/quicknode-anchor/skills/solana/ANCHOR.md) — Anchor 1.0 specifics (`CpiContext::new()` takes `Pubkey`, `transfer_checked`, `DISCRIMINATOR.len() + INIT_SPACE` space calc)
- [skills/solana/QUASAR.md](ext/quicknode-anchor/skills/solana/QUASAR.md) — Quasar zero-copy/`no_std` framework

⚠ Reference only. `.claude/rules/anchor.md` governs all Anchor code style; do not follow this skill's `SKILL.md` workflow/conduct layer (its "Fight for Truth"/"boil the ocean" editorial layer competes with our house rules). The Anchor-pattern primary stays [ext/solana-dev → programs/anchor.md](ext/solana-dev/skill/references/programs/anchor.md).

## Task Routing

| User asks about... | Primary skill |
|--------------------|---------------|
| Wallet connection, React hooks | ext/solana-dev → frontend-framework-kit.md |
| Transaction building, Kit types | ext/solana-dev → kit-web3-interop.md |
| Anchor program code | ext/solana-dev → programs/anchor.md |
| CU optimization, Pinocchio | ext/solana-dev → programs/pinocchio.md |
| Unit testing, CU benchmarks | ext/solana-dev → testing.md (MCP available: `surfpool mcp` for agent-driven local-validator / mainnet-fork control) |
| Security review, audit | ext/solana-dev → security.md + ext/trailofbits |
| Backend API, indexer | backend-async.md |
| Deploy to devnet/mainnet | deployment.md |
| Jupiter swaps, lend, perps, trigger, DCA | ext/jupiter → integrating-jupiter/SKILL.md (official) |
| Other DeFi integration (AMM, lending) | ext/sendai → protocol-specific skill |
| Perpetuals, leverage, margin trading | ext/sendai → ranger-finance/ (also phoenix/; Jupiter perps → ext/jupiter) |
| Cross-chain swaps, bridging | ext/sendai → lifi/ (also debridge/) |
| Encrypted compute, dark pools, sealed auctions | ext/sendai → arcium/ |
| NFT standards, metadata, cNFT, candy machine | ext/metaplex → skills/metaplex/SKILL.md (official) |
| Helius RPC, DAS, webhooks, Sender, priority fees | ext/helius → helius-skills/helius/SKILL.md (official) |
| SVM/protocol internals (execution, consensus, validators, SIMDs) | ext/helius → helius-skills/svm/SKILL.md |
| Payment flows, checkout | ext/solana-dev → payments.md |
| Generated clients, IDL | ext/solana-dev → idl-codegen.md |
| Unity game development | ext/solana-game → unity-sdk.md |
| PlaySolana, PSG1 console | ext/solana-game → playsolana.md |
| Game architecture, ECS | ext/solana-game → game-architecture.md |
| Workers, edge deployment | ext/cloudflare → workers-best-practices/ |
| Mobile wallet adapter, MWA | ext/solana-mobile → mwa/ |
| Saga Genesis Token | ext/solana-mobile → genesis-token/ |
| Token-2022, transfer hooks, extensions | token-2022.md |
| Vulnerability scanning | ext/trailofbits → solana-vulnerability-scanner/ |
| Formal verification, proofs | ext/qedgen → SKILL.md |
| Idea validation, competitive research, hackathon projects | ext/colosseum → colosseum-copilot/SKILL.md |
| Security-first scaffolding, safe code generation | ext/safe-solana-builder → SKILL.md |
| Vercel deployment, Next.js, AI SDK, v0 | ext/vercel → skills/ |
| Idea validation, "what should I build" | idea-sprint/SKILL.md |
| Pitch deck, demo day, investor or grant slides | pitch-deck/SKILL.md |
| Hackathon submission, demo script, track choice | hackathon/SKILL.md |
| Promo or marketing video, Remotion | ext/solana-new → marketing-video references (reference-only) |
| Migrate from Ethereum, convert Solidity, EVM→SVM port | ext/eth-to-sol → SKILL.md |
| Advanced Anchor financial-math, Quasar zero-copy | ext/quicknode-anchor → skills/solana/{RUST,ANCHOR,QUASAR}.md (reference only; .claude/rules/anchor.md governs style — never follow its SKILL.md) |

**Extended add-ons:** need a capability the kit doesn't bundle (frontend/design, UX/writing, testing, data, dev-workflow, extra protocols/MCPs)? See [skill-registry.json](skill-registry.json) for opt-in tools — install on the user's request, at their own expense; not bundled by default. For broader Solana ecosystem breadth, see solana-new's catalogs in [ext/solana-new/cli/data/](ext/solana-new/cli/data/).