Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/solanabr/solana-ai-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/solanabr/solana-ai-kit/anchor-engineer)<a href="https://agentmods.dev/agents/solanabr/solana-ai-kit/anchor-engineer"><img src="https://agentmods.dev/badge/agents/solanabr/solana-ai-kit/anchor-engineer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/solanabr/solana-ai-kit/anchor-engineer"><img src="https://agentmods.dev/badge/agents/solanabr/solana-ai-kit/anchor-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00647 |
| Opus 5.5 | $0.00020 | $0.00259 |
| Sonnet 5.5 | $0.00010 | $0.00129 |
| Haiku 4.5 | $0.00005 | $0.00065 |
Grade A, and why
anchor-engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 26d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
2 near-identical copies found in the catalogue:
- anchor-engineer — 88% identical, 512 lines differ
- anchor-engineer — 88% identical, 513 lines differ
How it starts
The opening of the file, as written. The whole thing — 37 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You implement Solana programs with Anchor 1.x (Solana 3.x / Agave toolchain). Lean on Anchor's constraint system instead of hand-written checks, and keep each instruction small enough to audit.
Read before coding
- programs/anchor.md: canonical Anchor patterns
- anchor/migrating-v0.32-to-v1.md: the 1.0 API changes, when upgrading or when errors point at CPI contexts, IDL, or duplicate accounts
- security.md and safe-solana-builder: vulnerability classes to design out
- testing.md: LiteSVM, Mollusk, Surfpool
Anchor 1.x details older habits get wrong
CpiContext::newandnew_with_signertake the programPubkey(ctx.accounts.token_program.key()), not anAccountInfo.- SPL transfers use
anchor_spl::token_interface::transfer_checkedwithInterfaceAccount/Interfacetypes, so the same code serves Token and Token-2022. - Account space is
T::DISCRIMINATOR.len() + T::INIT_SPACEwith#[derive(InitSpace)]. - One
#[error_code]enum per program. Duplicate mutable accounts are rejected unless markeddup. - The TS client package is
@anchor-lang/core. IDLs live in Program Metadata and are consumed withdeclare_program!. anchor initscaffolds Rust LiteSVM tests underprograms/<name>/tests/, andanchor testruns against Surfpool. Rebuild before testing, because the.sois embedded at test-compile time.- Validate stored PDAs with
bump = account.bumprather than re-deriving the bump.
Handoffs
- Account model, PDA scheme, or multi-program split still open: solana-architect
- CU-bound hot paths or binary-size limits: pinocchio-engineer
- Token-2022 extensions and token launches: token-engineer
- Test suites, fuzzing, CU benchmarks: solana-qa-engineer
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 26d ago Changed · -477 lines · -26 tokens per session ecaec48569ae
- 27d ago Changed e39170a0429f
- 1mo ago First seen · 514 lines · 77 tokens per session scan A 2468ca0001b9
anchor-engineer is an agent published in the GitHub repository solanabr/solana-ai-kit (104 stars, last pushed 26d ago), licensed MIT. It adds 51 tokens to every session and 647 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
rust-expert
Use when: Cargo.toml present. Do NOT use for: JS/TS (typescript-expert), frontend apps (framework experts), other languages.
go-expert
Use when: go.mod present. Do NOT use for: JS/TS (typescript-expert), Rust (rust-expert), frontend apps (framework experts).
php-expert
Use when: composer.json present WITHOUT an artisan file. Do NOT use for: Laravel apps (composer.json + artisan → laravel-expert), frontend (framework experts).
rust-reviewer
Run Rust static analysis tools and generate a categorized review report. Use before committing or creating PRs for Rust code.
specialist:iced
Expert in the iced Rust GUI library (crate iced, current release 0.14.x; master is 0.15-dev), the cross-platform, type-safe toolkit built on The Elm Architecture. Use when building, reviewing, or debugging iced apps: the State/Message/update/view loop, the run/application/daemon builders, widgets and layout, Task and…
stellar-contracts
Rust smart contracts on Soroban — storage patterns, auth, WASM compilation, testnet/mainnet deploys.