algorand-vulnerability-scanner

Scan Algorand TEAL or PyTeal smart contracts for 11 common security vulnerabilities.

Updated Jan 30, 2026
One-click install
npx skills add https://github.com/andrescardonas7/salchipapa-web --skill algorand-vulnerability-scanner-andrescardonas7
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/andrescardonas7/salchipapa-web/tree/main/.cursor/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/andrescardonas7/salchipapa-web --skill algorand-vulnerability-scanner-andrescardonas7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps fix common security vulnerabilities in Algorand smart contracts, preventing potential exploits and financial loss.

Core Features & Use Cases

  • Vulnerability Detection: Scans TEAL/PyTeal code for 11 critical Algorand-specific security flaws.
  • Automated Reporting: Generates detailed reports with severity, file references, and suggested fixes.
  • Use Case: Before deploying your new Algorand DeFi protocol, use this Skill to perform a comprehensive security audit and ensure all critical vulnerabilities are addressed.

Quick Start

Use the algorand-vulnerability-scanner skill to scan the 'approval.py' file for security vulnerabilities.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Algorand smart contracts for security vulnerabilities?

To audit Algorand smart contracts for security vulnerabilities, scan your TEAL or PyTeal code to identify 11 common flaws like rekeying attacks and access control issues, generating detailed reports with mitigation strategies.

What common security vulnerabilities affect Algorand TEAL and PyTeal code?

Common Algorand TEAL and PyTeal vulnerabilities include rekeying attacks, unchecked transaction fees, and access control flaws. Detecting these patterns early prevents potential exploits and financial loss in DeFi protocols.

Does Tealer work with PyTeal for automated vulnerability detection?

Yes, Tealer works with PyTeal for automated vulnerability detection. The scanner integrates with Tealer to automatically detect security flaws and provides detailed reports with severity, file references, and suggested fixes.

How do I scan an Algorand approval.py file for access control flaws before deployment?

To scan an Algorand approval.py file for access control flaws, run an automated vulnerability scanner on the PyTeal code. It identifies security issues and outputs a report with code references and mitigation strategies.

What's the best way to prevent rekeying attacks in Algorand smart contracts?

The best way to prevent rekeying attacks in Algorand smart contracts is to scan TEAL or PyTeal code for vulnerable patterns before deployment. The scanner identifies these flaws and provides specific mitigation strategies.