Does it integrate with other security tools?

Yes, it provides built-in support for running Caracal (Trail of Bits static analyzer) and helps interpret results within the scanning workflow.

Can I use this for L1-L2 bridge security?

Absolutely. It includes specific workflows for auditing L1 handler functions, verifying from_address parameters, and testing symmetric validation rules between layers.

Does this skill support Cairo 1.0?

Yes, it is designed for Cairo 1.0 and above, focusing on the latest StarkNet framework patterns, storage variables, and syscalls.

What types of vulnerabilities can this scanner detect?

It detects 6 critical patterns: unchecked felt252 arithmetic, storage collisions, missing access control, improper felt252 boundaries, unvalidated contract addresses, and missing L1-L2 caller validation.

Cairo Vulnerability Scanner

Name: Cairo Vulnerability Scanner
Author: fjor1025

byfjor1025

0•

보안 및 테스팅

Scans Cairo and StarkNet smart contracts for 6 critical security vulnerabilities including arithmetic overflows and L1-L2 messaging issues.

The Cairo Vulnerability Scanner is a specialized security auditing tool designed for developers working within the StarkNet ecosystem. It systematically analyzes Cairo code for high-impact vulnerabilities such as felt252 arithmetic overflows, storage collisions, and improper L1-L2 messaging handling. By integrating with industry-standard tools like Caracal and providing detailed remediation guidance, this skill helps developers identify and fix cryptographic flaws and access control issues before deployment to mainnet.

주요 기능

01Signature replay protection and cryptographic verification

020 GitHub stars

03L1-L2 bridge and message handler security validation

04Automated arithmetic safety checks for felt252 usage

05Detection of 6 critical Cairo/StarkNet vulnerability patterns

06Remediation guidance with secure code examples

사용 사례

01Reviewing cross-layer bridge implementations for message handling flaws

02Security auditing of StarkNet smart contracts before production launch

03Integrating security linting into Cairo-based CI/CD development pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework cairo-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill