algorand-vulnerability-scanner

Scan Algorand TEAL or PyTeal smart contracts for 11 common vulnerabilities.

1|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/allanninal/claude-code-skills --skill algorand-vulnerability-scanner-allanninal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/allanninal/claude-code-skills/tree/main/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/allanninal/claude-code-skills --skill algorand-vulnerability-scanner-allanninal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps fix 11 critical security vulnerabilities specific to Algorand smart contracts, preventing common exploits and ensuring robust code.

Core Features & Use Cases

  • Vulnerability Detection: Scans TEAL/PyTeal code for known Algorand exploits like rekeying attacks, unchecked fees, and access control issues.
  • Automated Analysis: Integrates with tools like Tealer for efficient, automated security checks.
  • Use Case: When auditing a new Algorand DeFi protocol, use this Skill to perform an initial security sweep, flagging potential risks before deeper manual review.

Quick Start

Scan the Algorand smart contract located at 'contracts/approval.py' for known vulnerabilities.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

To scan Algorand smart contracts for vulnerabilities, provide the file path to your TEAL or PyTeal code. The tool analyzes the contract for 11 common security exploits like rekeying attacks and unchecked fees, then generates a detailed report with recommended fixes.

What types of vulnerabilities can an Algorand smart contract audit detect?

An Algorand smart contract audit can detect 11 critical vulnerabilities including transaction manipulation, state management errors, access control issues, rekeying attacks, and unchecked fees to prevent common blockchain exploits.

Does the vulnerability scanner work with both TEAL and PyTeal code?

Yes, the vulnerability scanner works with both TEAL and PyTeal code. It integrates with the Tealer static analysis tool to perform automated security checks across your Algorand smart contract codebase regardless of which language you use.

When do I need to run a security audit on Algorand DeFi protocols?

You need to run a security audit on Algorand DeFi protocols before deployment or during initial security sweeps. Scanning your smart contracts early flags potential risks and access control vulnerabilities before conducting deeper manual code reviews.

What is the best way to fix detected vulnerabilities in PyTeal smart contracts?

The best way to fix detected vulnerabilities in PyTeal smart contracts is to review the detailed reports generated by the scanner. These reports identify specific security concerns and provide recommended fixes for transaction manipulation and state management issues.

Can I use Tealer for automated smart contract security checks on Algorand?

Yes, you can use Tealer for automated smart contract security checks on Algorand. The scanner integrates directly with the Tealer static analysis tool to efficiently detect access control issues and known exploits in your TEAL or PyTeal code.