solana-dev-rent-free
v1.0.8Skill for Solana development using rent-free primitives from Light Protocol. Covers client development (TypeScript, Rust) and program development (Rust) acro...
⭐ 0· 437·0 current·0 all-time
by@tilo-14
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to help Solana development with rent-free primitives and explicitly lists the CLIs and runtimes (node, solana, anchor, cargo, light) that a developer would reasonably need. No unrelated binaries or credentials are requested.
Instruction Scope
The SKILL.md is instruction-only and focuses on planning, asking the user clarifying questions, and running development tasks. It explicitly states it will not consume credentials and instructs the agent to rely on user-provided RPC endpoints and wallet keypairs. This is appropriate for a developer skill, but users should confirm the agent never asks them to paste private keys or sign transactions directly into the chat — the workflow relies on the user's app code and local CLIs for signing.
Install Mechanism
There is no formal install spec in the skill bundle (instruction-only). The README suggests an 'npx skills add Lightprotocol/skills' command to fetch a public GitHub/npm-hosted package. While that is plausible for a dev skill, running npx pulls and executes code from the network — users should verify the referenced repository before executing npx. The skill itself does not embed any arbitrary download URLs or extract steps.
Credentials
The skill declares no required environment variables or credentials (env: []). That aligns with its stated purpose of providing code patterns and docs while leaving sensitive items (RPC endpoints, keypairs) under user control.
Persistence & Privilege
always is false and disable-model-invocation is the platform default; the skill does not request persistent or cross-skill configuration or system-wide changes. Its allowed tools and workflow describe spawning subagents and using local CLIs, which is normal for an instruction skill.
Assessment
This skill appears internally consistent for Solana development with Light Protocol. Before installing or running any suggested commands: verify the Lightprotocol/skills repository referenced by the npx command and inspect its code; never paste private wallet key material or signing seeds into chat — use local CLIs or wallet adapters for signing; be cautious when running 'npx' as it executes network-fetched code; ensure the 'light' CLI and other required binaries you install come from official project releases. If the agent ever asks you to provide private keys or to upload wallet files, stop and verify why that is necessary.Like a lobster shell, security has layers — review code before you run it.
latestvk978h3k4xc562b6dfstmzrdr99824j5d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsnode, solana, anchor, cargo, light
