algorand-vulnerability-scanner

Catalogue généré le 2026-05-11

En une phrase

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.

Quand l'utiliser

Use when auditing Algorand projects (TEAL/PyTeal).

Comment l'invoquer

Slash command : /algorand-vulnerability-scanner (si exposé dans ton CLI)
Phrases déclencheurs : voir la description complète ci-dessous
Auto-invocation : sur demande explicite

Description complète

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).

Pour aller plus loin

Algorand Vulnerability Scanner

1. Purpose

Systematically scan Algorand smart contracts (TEAL and PyTeal) for platform-specific security vulnerabilities documented in Trail of Bits' "Not So Smart Contracts" database. This skill encodes 11 critical vulnerability patterns unique to Algorand's transaction model.

2. When to Use This Skill

Auditing Algorand smart contracts (stateful applications or smart signatures)
Reviewing TEAL assembly or PyTeal code
Pre-audit security assessment of Algorand projects
Validating fixes for reported Algorand vulnerabilities
Training team on Algorand-specific security patterns

3. Platform Detection

File Extensions & Indicators

TEAL files: .teal
PyTeal files: .py with PyTeal imports

Language/Framework Markers

Project Structure

approval_program.py / clear_program.py
contract.teal / signature.teal

(extrait — voir le SKILL.md complet pour la suite)

Source

Plugin : trailofbits/building-secure-contracts
Nom interne : algorand-vulnerability-scanner
Fichier : /home/thymon/.claude/plugins/cache/trailofbits/building-secure-contracts/1.0.1/skills/algorand-vulnerability-scanner/SKILL.md