algorand-vulnerability-scanner
An agent skill by trailofbits, from trailofbits/skills. Tags: analysis, blockchain, security, smart-contracts, teal.
What it does
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add trailofbits/skills --skill algorand-vulnerability-scannerOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/building-secure-contracts/skills/algorand-vulnerability-scanner ~/.claude/skills/algorand-vulnerability-scannerSafety box score
Grade A, minimal risk: 7 of 100 risk points, rated 2026-10-21. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a read-only audit helper for Algorand TEAL/PyTeal projects: it scans the repository, checks for 11 vulnerability patterns, and may invoke the local Tealer analyzer if present. The main risk is limited local command execution plus broad source-code inspection; it does not request privileges, secrets, or network access of its own.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 1 (low) | It can run a local analyzer (`Run Tealer (if installed)` / `tealer contract.teal --detect all`), but it does not ship arbitrary scripts or code-evaluation machinery. |
| Network access | 0 (none) | The shipped files do not download payloads or send data to remote hosts; they only reference documentation and show an install example. |
| Filesystem reach | 1 (low) | It explicitly says `Search your codebase for TEAL/PyTeal files` and `Analyze each file`, so it reads repository contents but stays scoped to the project. |
| Secrets & credentials | 0 (none) | No step asks for API keys, private keys, browser sessions, `.env` files, or other credential stores. |
| Privilege & persistence | 0 (none) | There is no sudo use, global install step, service registration, or shell/OS configuration change in the skill itself. |
| Instruction hijack surface | 0 (none) | The files do not contain prompt-injection style instructions such as ignoring rules, hiding behavior, or following remote content. |
| Irreversible actions | 0 (none) | It reports findings and suggested fixes only; it does not push, deploy, post, pay, book, or delete anything. |
| Transparency | 0 (none) | All shipped assets are readable text (`SKILL.md`, YAML, SVG); there are no binaries, packed blobs, or decoded-at-runtime code. |
Before installing
- Confirm you want the agent to read the full repository for `.teal` and `.py` files.
- If `tealer` is installed, try the skill in a disposable clone first because it may invoke the local analyzer.
- Skim `resources/VULNERABILITY_PATTERNS.md` so you know what the scan will flag.
Rated 2026-10-21 by an automated review of 4 files from the skill's repository.
Source
- Repository
- trailofbits/skills (all skills from this repository)
- Path
- plugins/building-secure-contracts/skills/algorand-vulnerability-scanner/SKILL.md
- Branch
- main
- Collection
- building-secure-contracts
- Updated
- 2026-09-19
Related skills
- cairo-vulnerability-scanner — Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems.
- cosmos-vulnerability-scanner — Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.
- solana-vulnerability-scanner — Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.
- substrate-vulnerability-scanner — Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks.
- token-integration-analyzer — Token integration and implementation analyzer based on Trail of Bits' token integration checklist.
- ton-vulnerability-scanner — Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts.