cairo-vulnerability-scanner

cairo vulnerability scanner

trailofbits 6.2k ↓ 3.7k CC-BY-SA-4.0 updated 28d ago

Claude Code

View source ↗

What it does

Auditing StarkNet smart contracts (Cairo)
Reviewing L1-L2 bridge implementations
Pre-launch security assessment of StarkNet applications
Validating cross-layer message handling
Reviewing signature verification logic
Assessing L1 handler functions
Cairo files: .cairo

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

cairo vulnerability scanner

Source

Repository: https://github.com/trailofbits/skills

cairo-vulnerability-scanner FAQ

What does the cairo-vulnerability-scanner skill do?

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects. Auditing StarkNet smart contracts (Cairo) Reviewing L1-L2 bridge implementations

How do I install cairo-vulnerability-scanner?

Run: npx -y skills add https://github.com/trailofbits/skills --skill cairo-vulnerability-scanner --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain cairo-vulnerability-scanner?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[cairo-vulnerability-scanner on getagentictools](https://getagentictools.com/skills/trailofbits-skills-cairo-vulnerability-scanner?ref=badge)

npx agentictools info skills/trailofbits-skills-cairo-vulnerability-scanner

The second line is the CLI lookup for this page — handy in READMEs and docs.