Who developed this vulnerability scanner?

The logic and patterns for this skill were developed by Trail of Bits, a leading cybersecurity research and auditing firm.

What kind of vulnerabilities does this skill find?

It scans for nine specific consensus-critical issues, including non-determinism, incorrect signers, ABCI panics, and various rounding errors.

Does it work with CosmWasm?

Yes, the scanner is designed to audit both the underlying Cosmos SDK infrastructure and the smart contracts written in CosmWasm.

What is the Cosmos Vulnerability Scanner skill?

It is a specialized security tool for Claude Code that automates the detection of critical vulnerabilities in blockchains built with the Cosmos SDK.

Is this a replacement for a manual security audit?

No, this skill is a powerful automated aid for identifying known vulnerability patterns, but it should be used as part of a comprehensive manual security review.

Cosmos Vulnerability Scanner

Name: Cosmos Vulnerability Scanner
Author: plurigrid

byplurigrid

•

보안 및 테스팅

Scans Cosmos SDK blockchains and CosmWasm contracts to detect consensus-critical vulnerabilities and security flaws.

Developed by Trail of Bits, this skill empowers Claude to perform specialized security audits on Cosmos SDK blockchains and CosmWasm smart contracts. It specifically targets nine consensus-critical vulnerability classes, including non-determinism, incorrect signer validation, ABCI panics, and rounding errors. By integrating these automated checks into the development workflow, teams can identify high-risk architectural flaws that could lead to chain halts or financial exploits before they reach production.

주요 기능

01Scans for incorrect signer validation in transaction handling

02Tailored for both Cosmos SDK modules and CosmWasm contracts

03Detects 9 distinct consensus-critical vulnerability patterns

042 GitHub stars

05Identifies non-determinism risks in blockchain state machine logic

06Flags potential ABCI panics that could cause chain halts

사용 사례

01Reviewing CosmWasm smart contracts for consensus-breaking bugs

02Performing security audits on new Cosmos SDK modules and app-chains

03Pre-deployment security hardening and vulnerability scanning

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add plurigrid/asi cosmos-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill