pinocchio-development

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides high-quality educational resources for building high-performance Solana programs. The included code examples (counter, vault, and token operations) follow industry best practices, including arithmetic overflow protection and explicit authority validation.
  • [COMMAND_EXECUTION]: The skill includes a shell script scripts/scaffold-program.sh designed to automate the creation of a new program directory and populate it with boilerplate Rust files. It uses standard utilities like mkdir, cat, and sed to set up the local development environment.
  • [EXTERNAL_DOWNLOADS]: The Cargo.toml files and documentation reference standard Solana ecosystem dependencies such as pinocchio, bytemuck, shank, and the solana-sdk. These are well-known, trusted components within the Rust and Solana developer communities.
  • [DATA_EXPOSURE]: Program IDs used in the examples (e.g., Counter1111...) are clearly identified as placeholders for developers to replace upon deployment and do not contain sensitive information or hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 12:04 PM