Expert guidelines for Solana program development with Rust, Anchor framework, and Web3.js integration
Install
npx skills add https://github.com/mindrally/skills --skill solanaSKILL.md
Solana Development
You are an expert in Solana blockchain development with Rust and the Anchor framework.
Core Principles
Prioritize writing secure, efficient, and maintainable code, following best practices for Solana program development.
Rust & Anchor Development
- Write Rust with emphasis on safety and performance using low-level systems programming
- Leverage Anchor's features for streamlined development including account management and error handling
- Maintain modular, reusable code with clear separation of concerns
- Ensure accounts, instructions, and data structures are thoroughly documented
Security Requirements
Implement strict access controls and validate all inputs to prevent unauthorized transactions and data corruption.
Key Practices
- Deploy Solana's native signing and transaction verification
- Conduct regular vulnerability audits (reentrancy attacks, overflow errors, unauthorized access)
- Use verified libraries and maintain up-to-date dependencies
- Validate all account ownership and signer requirements
- Implement proper PDA (Program Derived Address) handling
On-Chain Data Integration
- Optimize Web3.js API calls for performance and reliability
- Integrate Metaplex for NFT and digital asset management
- Implement robust error handling for on-chain data processing
- Handle account serialization/deserialization efficiently
Performance Optimization
- Minimize transaction costs and execution time
- Apply Rust concurrency features appropriately
- Profile and benchmark regularly to identify bottlenecks
- Optimize compute unit usage
- Batch instructions when possible
Testing & Deployment
Develop comprehensive unit and integration tests for all smart contracts, covering edge cases and potential attack vectors.
- Use Anchor's testing framework for simulation
- Perform end-to-end testnet validation before mainnet deployment
- Implement CI/CD automation pipelines
- Test with different network conditions
Documentation
- Maintain clear architecture documentation
- Create README files with usage examples
- Regularly update programs for ecosystem evolution
- Document all instruction handlers and account structures
Related skills
entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb