cairo-vulnerability-scanner
Detects security vulnerabilities in Cairo smart contracts on StarkNet with remediation and testing recommendations.
Install
npx skills add https://github.com/trailofbits/skills --skill cairo-vulnerability-scannerStats
| Total installs | 1,169 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Detects 6 vulnerability patterns: unchecked arithmetic, storage collision, missing access control, improper felt252 boundaries, unvalidated contract addresses, and missing caller validation
- Analyzes L1 handler functions for unvalidated from_address parameters and L1-L2 bridge implementations for cross-layer messaging vulnerabilities
- Integrates with Caracal static analyzer for automated detection and provides detailed findings with vulnerable code snippets and remediation examples
- Includes testing recommendations, priority guidelines, and a pre-deployment security checklist for StarkNet projects
Tags
Related skills
| Skill | Installs | vs cairo-vulnerability-scanner |
|---|---|---|
| harness-writing | 1,192 | +23 |
| substrate-vulnerability-scanner | 1,173 | +4 |
| ctf-reverse | 995 | -174 |
| cloud-architect | 1,016 | -153 |
| code-maturity-assessor | 1,232 | +63 |
FAQ
- How many installs does cairo-vulnerability-scanner have?
- cairo-vulnerability-scanner has 1,169 total installs and 1.2K installs this week.
- Where is cairo-vulnerability-scanner hosted?
- cairo-vulnerability-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does cairo-vulnerability-scanner have?
- cairo-vulnerability-scanner has 4.0K GitHub stars.
- When was cairo-vulnerability-scanner first indexed?
- OrangeBot.AI first indexed cairo-vulnerability-scanner on Jan 19, 2026.
- How do I install cairo-vulnerability-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill cairo-vulnerability-scanner