Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add solana-foundation/solana-dev-skill --skill solana-devgit clone --depth 1 https://github.com/solana-foundation/solana-dev-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/solana-foundation/solana-dev-skill/solana-dev)<a href="https://agentmods.dev/skills/solana-foundation/solana-dev-skill/solana-dev"><img src="https://agentmods.dev/badge/skills/solana-foundation/solana-dev-skill/solana-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/solana-foundation/solana-dev-skill/solana-dev"><img src="https://agentmods.dev/badge/skills/solana-foundation/solana-dev-skill/solana-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 148 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00249 | $0.03749 |
| Opus 5.5 | $0.00100 | $0.01500 |
| Sonnet 5.5 | $0.00050 | $0.00750 |
| Haiku 4.5 | $0.00025 | $0.00375 |
Grade A, and why
solana-dev scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: 'Use when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", "fuzz my Solana program", "deploy to de How it starts
The opening of the file, as written. The whole thing — 198 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Solana Development Skill
What this Skill is for
Use this Skill when the user asks for:
- Solana dApp UI work (React / Next.js)
- Wallet connection + signing flows
- Transaction building / sending / confirmation UX
- Transaction v1 / larger transactions (SIMD-0385) — the default format for new code; sending, reading, indexing
- On-chain program development (Anchor or Pinocchio)
- Program architecture — state layout, PDA seed conventions, naming, parallelization, cranks, vault topology
- Client SDK generation (typed program clients)
- Local testing (Surfpool, LiteSVM, Mollusk) and fuzz testing (Trident, cargo-fuzz)
- Security hardening and audit-style reviews
- Confidential transfers (Token-2022 ZK extension)
- Toolchain setup, version mismatches, GLIBC errors, dependency conflicts
- Upgrading Anchor/Solana CLI versions, migration between versions
- Migrating web3.js v1 code to web3.js v3 or Kit
Default stack decisions (opinionated)
- SDK: @solana/kit 8 plugin clients, transaction v1 by default
- Build clients with
createClient()from@solana/kit, then.use(...)plugins. PasstransactionConfig: { version: 1 }to the RPC plugin so every transaction the client plans is v1:createClient() .use(signer(mySigner)) .use(solanaRpc({ rpcUrl, transactionConfig: { version: 1, priorityFeeLamports: lamports(5_000n) } })); // or solanaLocalRpc / solanaDevnetRpc / solanaMainnetRpc from @solana/kit-plugin-rpc - Transaction v1 is the default for new code. Set
version: 1; the planner otherwise defaults to v0. Plugin clients estimate compute and loaded-accounts-data limits by simulation. On manual pipelines, use Kit's resource-estimation helpers instead of guessing limits; use fixed values only for measured overrides or deliberate caps. See transactions-v1.md. - Manual
pipe()+createTransactionMessage({ version: 1 })is the low-level alternative for when you need control over every step (custom lifetimes, offline signing, bespoke planners) — see kit/advanced.md. It is not the default path. - Default to
signer()/signerFromFile()/generatedSigner()from@solana/kit-plugin-signer— they set bothpayerandidentityto the same keypair (the common case). For fresh local/devnet signers, install the RPC/LiteSVM plugin aftergeneratedSigner(), then fund withairdropSigner(...). Reach for the role-specific variants (payer()+identity()) only when fees and authority must come from different keypairs. - Use
@solana-program/*program plugins (e.g.,tokenProgram()) for fluent instruction APIs. - Prefer Kit types (
Address,Signer, transaction message APIs, codecs).
What ships with it
32 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/anchor/migrating-v0.32-to-v1.md 33 KB
- references/common-errors.md 24 KB
- references/compatibility-matrix.md 25 KB
- references/concepts.md 4.4 KB
- references/confidential-transfers.md 26 KB
- references/frontend.md 12 KB
- references/idl-codegen.md 1.6 KB
- references/kit-web3-interop.md 3.4 KB
- references/kit/accounts.md 3.8 KB
- references/kit/advanced.md 17 KB
- references/kit/codama.md 2.5 KB
- references/kit/codecs.md 4.0 KB
- references/kit/gotchas.md 12 KB
- references/kit/overview.md 15 KB
- references/kit/plugins.md 16 KB
- references/kit/programs/compute-budget.md 10 KB
- references/kit/programs/system.md 4.2 KB
- references/kit/programs/token-2022.md 2.5 KB
- references/kit/programs/token.md 7.3 KB
- references/kit/react.md 12 KB
- references/payments.md 2.9 KB
- references/programs/anchor.md 13 KB
- references/programs/design-patterns.md 16 KB
- references/programs/pinocchio.md 24 KB
- references/resources.md 5.9 KB
- references/rpc-quick-lookups.md 5.6 KB
- references/security.md 33 KB
- references/surfpool/cheatcodes.md 13 KB
- references/surfpool/kit-plugin.md 14 KB
- references/surfpool/overview.md 26 KB
- references/testing.md 21 KB
- references/transactions-v1.md 31 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · -3 tokens per session ae28dffcf081
- 12d ago Changed c14678610ab4
- 18d ago Changed 37f593a9f96d
- 29d ago Changed · +2 lines · +2 tokens per session b212fe7308a4
- 1mo ago Changed · +250 tokens per session c6d34b33851c
- 1mo ago First seen · 196 lines · 0 tokens per session scan A 85ea1cb7a9f6
solana-dev is a skill published in the GitHub repository solana-foundation/solana-dev-skill (579 stars, last pushed 4d ago), licensed MIT. It adds 249 tokens to every session and 3,749 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
privy-integration
Integrates Privy authentication, embedded wallets, and agent payment protocols into web and agentic apps. Covers React SDK (PrivyProvider, hooks, wagmi), Node.js SDK, smart wallets (ERC-4337), x402 and MPP machine payments, Tempo chain, and agentic wallets with policies. Use when setting up Privy auth, creating…
slv-rpc-gateway
A small Rust JSON-RPC + WebSocket gateway that fronts yellowstone-faithful (of1) and routes jet analytics methods to ClickHouse (jetstreamer data). Standard Solana RPC methods pass straight through; new analytic methods are answered from precomputed jetstreamer aggregates.
helius
Skill "helius" from helius-labs/core-ai, covering helius — build on solana, prerequisites, 1. helius mcp server, 2. mcp router surface and 3. api key.
debridge
Complete deBridge Protocol SDK for building cross-chain bridges, message passing, and token transfers on Solana. Use when building cross-chain applications, bridging assets between Solana and EVM chains, or implementing trustless external calls.
lifi
Integrate LI.FI for cross-chain swaps, bridging, payments, route discovery, and transfer status tracking across Solana, EVM, Bitcoin, and Sui. Use when building Solana applications or AI agents that need quotes, routes, executable transactions, supported chains/tokens/tools, or cross-chain transfer monitoring.
ct-alpha
Crypto Twitter intelligence and alpha research. Search X/Twitter for real-time crypto narratives, trending tokens, yield strategies, smart money signals, and protocol research. Features TweetRank (PageRank-inspired credibility scoring), multi-signal token detection, coordinated raid detection, and dynamic tool…