algorand-vulnerability-scanner

Scan Algorand smart contracts for 11 common vulnerability patterns.

Updated May 2, 2026
One-click install
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill algorand-vulnerability-scanner-ayehiaa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill algorand-vulnerability-scanner-ayehiaa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you identify common, high-impact security vulnerabilities in Algorand smart contracts by scanning TEAL and PyTeal code for known vulnerability patterns.

Core Features & Use Cases

  • Algorand-specific vulnerability scanning: Detects 11 common vulnerability patterns tied to Algorand’s transaction and execution model (e.g., rekeying, fee issues, field validation gaps, and access control failures).
  • Framework and file detection: Recognizes TEAL and PyTeal sources based on extensions and typical imports/patterns.
  • Actionable audit output: Produces findings with file references and severity plus recommendations for fixes.
  • Optional Tealer integration: Runs Tealer detectors (when available) to complement pattern-based analysis.

Quick Start

Use the algorand-vulnerability-scanner skill to scan your Algorand project's approval and clear logic files (TEAL/PyTeal) and generate a vulnerability report with prioritized findings.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

Algorand vulnerability scanning detects 11 common vulnerability patterns, such as rekeying, fee issues, and access control failures, by pattern matching TEAL and PyTeal code against Algorand's transaction and execution model.

Can I audit PyTeal code for transaction field exploitation?

Yes, PyTeal auditing detects transaction-field exploitation by recognizing typical PyTeal source patterns and imports, generating severity-tagged findings with file references and actionable fix recommendations.

Does this vulnerability scanner integrate with Tealer for automated detection?

Yes, optional Tealer integration runs Tealer detectors when available to complement pattern-based analysis, adding automated detection of Algorand contract vulnerabilities alongside the 11 vulnerability class scans.

What is the best way to validate fixes for Algorand authorization bypasses?

The best way to validate fixes for Algorand authorization bypasses is to rescan the updated TEAL or PyTeal codebase to verify that previously identified access control failures and field validation gaps are resolved.

Do I need Tealer installed to detect Algorand contract security gaps?

No, Tealer is not required; the scanner performs built-in codebase scanning and pattern matching for 11 vulnerability classes without it, using Tealer optionally for automated detection when available.