algorand-vulnerability-scanner

Scan Algorand TEAL and PyTeal contracts for vulnerabilities using Tealer.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill algorand-vulnerability-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill algorand-vulnerability-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security engineers and auditors identify vulnerabilities in Algorand TEAL/PyTeal contracts by scanning source files and flagging common patterns based on Trail of Bits' Not So Smart Contracts database.

Core Features & Use Cases

  • Automated vulnerability detection across TEAL and PyTeal files.
  • Pattern coverage includes Rekeying, CloseRemainderTo, Asset/Group/OnComplete checks, and more (11 patterns).
  • Audit workflow integration with the Tealer toolchain to generate findings and remediation guidance for developers.
  • Use cases include pre-audit reviews, security training, and regression checks during contract upgrades.

Quick Start

Run the vulnerability scan against Algorand TEAL/PyTeal contracts in your repository with the recommended CLI, then review the generated report and remediation suggestions.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Algorand TEAL and PyTeal smart contracts for vulnerabilities?

To audit Algorand TEAL and PyTeal smart contracts for vulnerabilities, run this Skill to scan source files and flag common security patterns like Rekeying and CloseRemainderTo. It generates actionable findings and remediation guidance for developers.

What vulnerabilities are detected during an Algorand smart contract security review?

An Algorand smart contract security review with this scanner identifies 11 vulnerability patterns, including Rekeying, CloseRemainderTo, and missing Asset, Group, or OnComplete checks based on the Not So Smart Contracts database.

Can I use Tealer for static analysis on stateful Algorand contracts and smart signatures?

Yes, you can use Tealer for static analysis on stateful Algorand contracts and smart signatures. This Skill leverages the Tealer toolchain to produce actionable remediation guidance for developers.

Does this vulnerability scanner support PyTeal code or only TEAL assembly?

This vulnerability scanner supports both PyTeal code and TEAL assembly files. It performs automated vulnerability detection across both formats to identify common security patterns during pre-audit reviews.

What is the best way to integrate an Algorand security audit into a contract upgrade workflow?

The best way to integrate an Algorand security audit into a contract upgrade workflow is running automated static analysis via this Skill for regression checks. Review the generated report to verify previously identified vulnerability patterns are resolved.

Are there limitations when using static analysis for Algorand TEAL vulnerability detection?

Static analysis for Algorand TEAL vulnerability detection is limited to predefined pattern sets like the 11 supported vulnerability types. It may not catch complex, context-dependent logic flaws requiring dynamic testing or manual review.