substrate-vulnerability-scanner

substrate vulnerability scanner

trailofbits 6.2k ↓ 3.7k CC-BY-SA-4.0 updated 28d ago

Claude Code

View source ↗

What it does

Auditing custom Substrate pallets
Reviewing FRAME runtime code
Pre-launch security assessment of Substrate chains (Polkadot parachains, standalone chains)
Validating dispatchable extrinsic functions
Reviewing weight calculation functions
Assessing unsigned transaction validation logic
Rust files: .rs

Requirements & configuration

Affects balance/token calculations, reward/fee math
Arithmetic overflow (token creation, balance manipulation)

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

substrate vulnerability scanner

Source

Repository: https://github.com/trailofbits/skills

substrate-vulnerability-scanner FAQ

What does the substrate-vulnerability-scanner skill do?

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets. Auditing custom Substrate pallets Reviewing FRAME runtime code

What does substrate-vulnerability-scanner require?

Affects balance/token calculations, reward/fee math Arithmetic overflow (token creation, balance manipulation)

How do I install substrate-vulnerability-scanner?

Run: npx -y skills add https://github.com/trailofbits/skills --skill substrate-vulnerability-scanner --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain substrate-vulnerability-scanner?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[substrate-vulnerability-scanner on getagentictools](https://getagentictools.com/skills/trailofbits-skills-substrate-vulnerability-scanner?ref=badge)

npx agentictools info skills/trailofbits-skills-substrate-vulnerability-scanner

The second line is the CLI lookup for this page — handy in READMEs and docs.