solana-wingman

Solana development tutor and builder. Teaches smart contract (program) development through Solana-native challenges, Anchor framework, and security best practices.

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "solana-wingman" with this command: npx skills add x4484/solana-wingman/x4484-solana-wingman-solana-wingman

Solana Wingman

A comprehensive Solana development tutor and guide. Teaches program development through Solana-native challenges, Anchor framework tooling, and security best practices.

The Most Important Concept

ACCOUNTS ARE EVERYTHING ON SOLANA.

Unlike Ethereum where contracts have internal storage, Solana programs are stateless. All data lives in accounts that programs read and write.

For every feature, ask:

  • Where does this data live? (which account)
  • Who owns that account? (program-owned vs user-owned)
  • Is it a PDA? (Program Derived Address - deterministic, no private key)
  • Who pays rent? (rent-exempt = 2 years upfront)

Quick Start

# 1. Create project folder
mkdir my-solana-project && cd my-solana-project

# 2. Initialize Anchor project
anchor init my_program

# 3. Start local validator
solana-test-validator

# 4. Build and test
anchor build
anchor test

What I Help With

🎓 Teaching Mode

  • "How do PDAs work?"
  • "Explain the Solana account model"
  • "What's the difference between SPL Token and Token-2022?"

🔨 Build Mode

  • "Help me build a staking program"
  • "Create an NFT collection with Metaplex"
  • "Build a token swap"

🔍 Review Mode

  • "Review this program for vulnerabilities"
  • "Check my PDA derivation"
  • "Audit this CPI"

🐛 Debug Mode

  • "Why is my transaction failing?"
  • "Debug this 'account not found' error"
  • "Fix my token transfer"

Critical Gotchas

Read references/critical-gotchas.md for the full list. Key ones:

  1. Account Model ≠ EVM Storage - Every piece of data needs an account
  2. PDAs Have No Private Key - Derived deterministically from seeds
  3. Token Accounts Are Separate - Each token needs its own account per wallet
  4. Rent Must Be Paid - Accounts need SOL to exist (2 years = rent-exempt)
  5. Compute Units ≠ Gas - Fixed budget, request more if needed

Challenges

Located in knowledge/challenges/:

#ChallengeCore Concept
0Hello SolanaFirst Anchor program
1SPL TokenFungible tokens, ATAs
2NFT MetaplexNFT standard, metadata
3PDA EscrowPDAs, program authority
4StakingTime-based rewards
5Token-2022Modern token extensions
6Compressed NFTsState compression
7Oracle (Pyth)Price feeds
8AMM SwapDEX mechanics
9BlinksShareable transactions

References

  • references/critical-gotchas.md - Must-know pitfalls
  • ../../knowledge/foundations/01-account-model.md - Deep dive on accounts
  • ../../knowledge/foundations/02-pdas.md - PDA patterns and examples

External Resources

Related Skills

  • ../solana-defi/SKILL.md - Jupiter DeFi integrations
  • ../solana-blinks/SKILL.md - Blinks & Actions builder
  • ../solana-security/SKILL.md - Security auditor

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

skillguard-hardened

Security guard for OpenClaw skills, developed and maintained by rose北港(小红帽 / 猫猫帽帽). Audits installed or incoming skills with local rules plus Zenmux AI intent review, then recommends pass, warn, block, or quarantine.

Archived SourceRecently Updated
Security

api-contract-auditor

审查 API 文档、示例和字段定义是否一致,输出 breaking change 风险。;use for api, contract, audit workflows;do not use for 直接改线上接口, 替代契约测试平台.

Archived SourceRecently Updated
Security

ai-workflow-red-team-lite

对 AI 自动化流程做轻量红队演练,聚焦误用路径、边界失败和数据泄露风险。;use for red-team, ai, workflow workflows;do not use for 输出可直接滥用的攻击脚本, 帮助破坏系统.

Archived SourceRecently Updated
Security

openclaw360

Runtime security skill for AI agents — prompt injection detection, tool call authorization, sensitive data leak prevention, skill security scanning, and one-click backup & restore

Archived SourceRecently Updated