cosmos-vulnerability-scanner
Scans Cosmos SDK and CosmWasm code for security vulnerabilities like non-determinism and authorization issues.
Install
npx skills add https://github.com/trailofbits/skills --skill cosmos-vulnerability-scannerStats
| Total installs | 1,187 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Detects non-determinism, incorrect signers, ABCI panics, rounding errors, missing validations, and reentrancy patterns that cause chain halts or fund loss
- Supports Go (Cosmos SDK modules) and Rust (CosmWasm contracts) with automatic platform detection via file extensions and import markers
- Provides detailed findings with vulnerable code snippets, attack scenarios, and step-by-step remediation guidance
- Includes scanning workflow covering non-determinism sweeps, ABCI method analysis, message validation, and arithmetic bookkeeping checks
Tags
Related skills
| Skill | Installs | vs cosmos-vulnerability-scanner |
|---|---|---|
| aflpp | 1,161 | -26 |
| atheris | 1,168 | -19 |
| ton-vulnerability-scanner | 1,172 | -15 |
| django-verification | 1,240 | +53 |
| ruzzy | 1,155 | -32 |
FAQ
- How many installs does cosmos-vulnerability-scanner have?
- cosmos-vulnerability-scanner has 1,187 total installs and 1.2K installs this week.
- Where is cosmos-vulnerability-scanner hosted?
- cosmos-vulnerability-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does cosmos-vulnerability-scanner have?
- cosmos-vulnerability-scanner has 4.0K GitHub stars.
- When was cosmos-vulnerability-scanner first indexed?
- OrangeBot.AI first indexed cosmos-vulnerability-scanner on Jan 19, 2026.
- How do I install cosmos-vulnerability-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill cosmos-vulnerability-scanner