Open Source Tools

Enforces a complete development methodology: @solana/client + @solana/react-hooks for UI, @solana/kit for SDK, Anchor or Pinocchio for programs, LiteSVM/Mollusk/Surfpool for testing. Includes coding standards (Array<T> syntax, no abbreviations, no any), deletionist philosophy, and security checklists baked into every workflow step.

Install

The Carbon framework indexes Solana transactions but building decoders correctly is tricky. This skill covers the full lifecycle: codegen CLI setup, trait implementation, discriminator computation, ArrangeAccounts patterns, event decoding, and wiring decoders into the Carbon pipeline. Prevents the most common failure mode: silent parse failures where transactions are dropped instead of erroring.

Install

Handles the tedious translation between Rust struct layouts and TypeScript Borsh schemas. Correctly maps Rust types (u64, Pubkey, Option<T>, Vec<T>, enums with data) to their Borsh codec equivalents. Produces working deserialize functions you can use immediately to read Solana account data.

Install

Anchor uses SHA256-based discriminators to identify instructions and accounts. A mismatch means transactions are silently dropped rather than failing visibly. This skill computes the correct discriminator from the instruction or account name and cross-checks it against your parser code.

Install

Traces every PDA derivation in the codebase and verifies seeds and program IDs match the on-chain program expectations. Catches the class of bugs where a PDA resolves to an account owned by a different program, or where seed ordering produces a valid but incorrect address.

Install

Opinionated playbook covering the 2026 Solana stack: @solana/client + @solana/react-hooks for React UI, @solana/kit for all client/RPC code, Anchor or Pinocchio for programs, Codama for client generation, and LiteSVM for fast local testing. Includes migration guidance from legacy web3.js.

Install

Adapts Solana program security best practices to the TypeScript client layer where the same bug classes appear. Checks for: unchecked account ownership, missing signature verification, incorrect PDA seeds, unsafe deserialization, fee calculation overflow, and stale account data. Run this before merging any client code that touches on-chain interactions.

Install

Token 2022 introduced transfer fees, interest-bearing tokens, and confidential transfers. Code that only handles the original SPL Token program will silently fail or produce wrong results for Token 2022 assets. This skill finds every place that reads token data and checks for dual-program handling.

Install

Combines sharp-edges detection (dangerous APIs, footgun patterns, error-prone configurations) with variant hunting methodology (find all instances of a vulnerability pattern across the codebase). Inspired by Trail of Bits' approach to security research. Produces a prioritized list of findings with severity, location, and remediation guidance.

Install

Builds comprehensive architectural understanding through ultra-granular code analysis. Maps trust boundaries, data flows, authentication patterns, and attack surfaces. Designed for security auditors who need to rapidly understand unfamiliar codebases before diving into vulnerability research. Inspired by Trail of Bits methodology.

Install

Formal verification for state machines without learning TLA+. Write your machine in TypeScript, define invariants (e.g., 'at most one running item per user'), and the skill verifies all reachable states satisfy them. Use for billing flows, subscription lifecycles, agent orchestration, queue processing, or any state machine where a bug means corrupted data or stuck users.

Install

Uses <important if> conditional blocks to make instructions context-aware rather than always-on. Restructures CLAUDE.md files so the AI agent follows instructions more reliably. Cuts instructions the agent can discover from existing code patterns, and strengthens the ones that actually need to be explicit.

Install

Extracts captions via yt-dlp, structures them into Obsidian-compatible markdown with YAML frontmatter, auto-generated tags, timestamps, and wikilinks. Handles single videos and full playlists. Infers vault path from channel name and content topic. Part of my Obsidian-based research workflow where video content becomes searchable, linkable knowledge.

Install