pinocchio-development
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides high-quality educational resources for building high-performance Solana programs. The included code examples (counter, vault, and token operations) follow industry best practices, including arithmetic overflow protection and explicit authority validation.
- [COMMAND_EXECUTION]: The skill includes a shell script
scripts/scaffold-program.shdesigned to automate the creation of a new program directory and populate it with boilerplate Rust files. It uses standard utilities likemkdir,cat, andsedto set up the local development environment. - [EXTERNAL_DOWNLOADS]: The
Cargo.tomlfiles and documentation reference standard Solana ecosystem dependencies such aspinocchio,bytemuck,shank, and thesolana-sdk. These are well-known, trusted components within the Rust and Solana developer communities. - [DATA_EXPOSURE]: Program IDs used in the examples (e.g.,
Counter1111...) are clearly identified as placeholders for developers to replace upon deployment and do not contain sensitive information or hardcoded credentials.
Audit Metadata