Solana AI Kit plugin skill hub
This is the plugin variant of the kit's skill hub. It ships only the skills that travel cleanly in a plugin: the go-to-market skills, the Token Extensions skill and the opt-in add-on catalog. The protocol, security and ecosystem skills, the project CLAUDE.md with the program-code house rules, and the curated permissions and sandbox policy come with the full install (see "Getting more depth").
When sources overlap: a protocol's official skill wins for its own SDK (Jupiter, Metaplex, Helius); the Solana Foundation solana-dev skill wins for general Solana work (Anchor, Pinocchio, testing, clients); community skills such as sendai fill gaps only. In plugin form, add the relevant upstream marketplace first.
Bundled skills
These load when the plugin is enabled. Commands and skills are namespaced under solana-ai-kit: (for example /solana-ai-kit:deploy).
- skill-registry.json: catalog of opt-in add-on skills, plugins and MCPs that are not bundled. Search it by domain or tag and run an entry's install command only after the user confirms and
safe-ai-skill add skill|mcp <source> returns proceed: true. Entries with a tier are the full install's pinned skill packs; their source is the upstream repo.
- address-lookup-tables.md: lookup tables for wallets without v1: create, extend, attach to a v0 message, freeze, close
- keeper-ops.md: keepers and cranks in production: race handling, one sender, slot schedules, profitability, bundles, signer limits
- monitoring.md: alerts for a deployed program: on-chain signals, service metrics and thresholds, wiring
Kit reference files the agents and commands link to (plain files, not skills):
- deployment.md: program deploys, upgrades, verifiable builds, rollback
- backend-async.md: Rust services and indexers that talk to Solana
- csharp-unity-conventions.md: C# and Unity constraints that break a build or a player: Unity's C# 9 ceiling,
global.json, main-thread async, serialization, asmdefs, IL2CPP stripping, Solana.Unity-SDK defaults
The kit's own token-extensions covers Token-2022: which extensions to use and how they combine, then per-extension CLI, Kit and Anchor setup. Its links to the Solana Foundation solana-dev skill need the install.sh full install.
Security firewall (core)
This plugin depends on safe-ai-skill (safe-ai-skill@stbr), which installs with it. Its hooks gate mainnet, value-moving and authority actions and secret reads, and pin installed skills at session start. Its ask or deny is the user's policy, so don't retry the action another way. Its CLI is on PATH while it is enabled: safe-ai-skill status, safe-ai-skill verify check <dir>.
Getting more depth
Plugins cannot carry git submodules, so the kit's external skill packs (the ext submodules) are not bundled here. Two ways to get them:
Option A: add the upstream marketplaces
| Domain | Add the marketplace | Then install |
|---|
| DeFi protocols, infra, data (Jupiter, Raydium, Kamino, perps, oracles, cross-chain) | /plugin marketplace add sendaifun/skills | the protocol plugins you need |
| Security audits of programs and the code around them | nothing to add: a full install carries auditor-skill as a core pack (20 checklists, 1,424 items, 138 known vectors) | — |
| Infrastructure (Workers, Agents SDK, MCP servers) | /plugin marketplace add cloudflare/skills | cloudflare |
For Jupiter, Metaplex, Helius, MagicBlock and Alchemy the official skill repos are the primary sources; skill-registry.json lists their current upstream locations. Route to a marketplace and install the plugin rather than pointing at an upstream repo's SKILL.md.
Option B: full install (recommended for project teams)
Run the installer in your project to get what the plugin can't carry: the core external skill packs (extensions install on demand with /add-skill), the project CLAUDE.md, and the curated permissions and sandbox policy.
curl -fsSL https://raw.githubusercontent.com/solanabr/ai-kit/main/install.sh | bash
The project README ("External Skill Submodules" and "Install as a Claude Code plugin") explains when to pick the plugin or the full install; they are complementary. If both are active in one project, /solana-ai-kit:doctor flags the duplicate commands, hooks and MCP servers.
When a link into an ext pack is missing
The plugin's agents, commands and bundled skills are the same files the full install uses. Many of their links go through skills/ext into the external skill packs, and some lines add "install first: bash .claude/bin/skills.sh add <id>". A plugin install has neither the packs nor .claude/bin, so the link is dead and that command cannot run. Use a fallback and keep going:
- General Solana work (the
solana-dev pack: Anchor, Pinocchio, @solana/kit, testing, security): ask the bundled solana-dev MCP.
- The exact file: the kit's site serves the packs under
https://aikit.superteam.codes/.claude/skills/ext; append the part of the link that follows ext (for a folder link, its SKILL.md). If the site doesn't have it, use the pack's own repository, the source of its skill-registry.json entry (the folder after ext is the pack id); paths there can differ from the commit the kit pins.
- Tell the user once that the full install (
install.sh) puts the packs in the project, where these links and skills.sh work.
Two kit files are full-install only as well: the .claude/skills/SKILL.md hub (this skill replaces it) and the skill-packs skill (pack discovery here is skill-registry.json).
Task routing
| User asks about | Skill |
|---|
| An add-on skill, plugin or MCP that isn't bundled | skill-registry.json |
| A safe-ai-skill ask or deny, skill or MCP supply-chain checks | Security firewall (core) above |
| Protocol SDK depth, security audits, infra | Option A marketplaces or the Option B full install |
| Token-2022 extensions: fees, hooks, metadata, pausable, confidential | token-extensions |