Which specific vulnerabilities are covered?

The skill scans for 11 patterns including rekeying attacks, unchecked transaction fees, asset clawback risks, and missing group transaction validations.

What languages does this scanner support?

It supports Algorand's Transaction Execution Approval Language (TEAL) and PyTeal, the Python-based library for generating TEAL contracts.

Can I use this for automated CI/CD checks?

Yes, the skill provides specific scanning workflows and reporting formats designed to be integrated into testing pipelines and build processes.

How does it help with fixing vulnerabilities?

For every finding, the skill generates a detailed report including the vulnerable code, an attack scenario, and a recommended secure code implementation.

Does it require external tools to function?

While it can perform pattern matching via Claude, it is optimized to integrate with Tealer, the Trail of Bits static analyzer, for more robust automated results.

Algorand Vulnerability Scanner

Name: Algorand Vulnerability Scanner
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Audits Algorand smart contracts for 11 critical security vulnerabilities, including rekeying attacks and unchecked transaction fields.

This skill provides comprehensive security auditing capabilities for Algorand smart contracts written in TEAL or PyTeal. By encoding 11 platform-specific vulnerability patterns—such as rekeying risks, group transaction manipulation, and missing field validations—it helps developers identify and remediate security flaws early in the development lifecycle. Whether performing pre-audit assessments or validating security fixes, the scanner integrates best practices from Trail of Bits' 'Not So Smart Contracts' database to ensure robust contract logic on the Algorand blockchain.

主な機能

01Detects 11 critical Algorand-specific vulnerability patterns

02Validates transaction field requirements like RekeyTo and CloseRemainderTo

03Supports both TEAL assembly and PyTeal (Python-based) contracts

040 GitHub stars

05Integrates with the Tealer static analysis tool for automated detection

06Provides detailed remediation advice and code fixes for identified issues

ユースケース

01Automating security checks in CI/CD pipelines for Algorand projects

02Training developers on Algorand-specific security pitfalls and best practices

03Auditing Algorand smart contracts before mainnet deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks algorand-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill