substrate-vulnerability-scanner
Scans Substrate FRAME pallets for security vulnerabilities like arithmetic overflows, panics, and weight issues.
Install
npx skills add https://github.com/trailofbits/skills --skill substrate-vulnerability-scannerStats
| Total installs | 1,173 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Detects arithmetic overflow, panics, incorrect weights, verify-first violations, unsigned transaction validation issues, bad randomness, and bad origin patterns across FRAME pallets
- Includes platform detection for Substrate/FRAME projects, scanning workflow with step-by-step guidance, and severity prioritization (critical, high, medium)
- Provides fuzz testing, benchmarking, and try-runtime recommendations to validate fixes and prevent DoS and state corruption attacks
- Covers pre-v0.9.25 transactional storage issues and includes a quick-reference audit checklist for dispatchables, access control, and storage safety
Tags
Related skills
| Skill | Installs | vs substrate-vulnerability-scanner |
|---|---|---|
| secure-code-guardian | 1,112 | -61 |
| semgrep-rule-creator | 1,229 | +56 |
| libfuzzer | 1,173 | = |
| ton-vulnerability-scanner | 1,172 | -1 |
| coverage-analysis | 1,237 | +64 |
FAQ
- How many installs does substrate-vulnerability-scanner have?
- substrate-vulnerability-scanner has 1,173 total installs and 1.2K installs this week.
- Where is substrate-vulnerability-scanner hosted?
- substrate-vulnerability-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does substrate-vulnerability-scanner have?
- substrate-vulnerability-scanner has 4.0K GitHub stars.
- When was substrate-vulnerability-scanner first indexed?
- OrangeBot.AI first indexed substrate-vulnerability-scanner on Jan 19, 2026.
- How do I install substrate-vulnerability-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill substrate-vulnerability-scanner