algorand-vulnerability-scanner

Scan Algorand TEAL/PyTeal contracts for 11 vulnerability patterns and generate structured reports.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill algorand-vulnerability-scanner-dobriclilujun
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/DobricLilujun/LabAgentSkill/tree/main/skillsHub/skills_scaling/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill algorand-vulnerability-scanner-dobriclilujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically scans Algorand smart contracts (TEAL and PyTeal) for platform-specific security vulnerabilities documented in Trail of Bits' Not So Smart Contracts database, enabling proactive security reviews.

Core Features & Use Cases

  • Automated static analysis for 11 vulnerability patterns across TEAL and PyTeal contracts.
  • Produces structured reports with file references, severities, and recommended fixes, supporting audits of approval/clear programs, stateful applications, and smart signatures.
  • Integrates with Tealer tooling and reference materials to guide remediation and training.

Quick Start

Scan your Algorand project to identify and remediate security vulnerabilities in TEAL/PyTeal contracts.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

Static analysis of Algorand smart contracts detects 11 known vulnerability patterns in TEAL and PyTeal code, generating a structured report with severity ratings, file references, and recommended fixes for approval and clear state programs.

What types of Algorand vulnerabilities can static analysis detect?

Static analysis detects 11 Algorand vulnerability patterns documented in the Trail of Bits Not So Smart Contracts database, covering issues across stateless and stateful applications, smart signatures, and approval programs.

Can I audit PyTeal approval and clear state programs for vulnerabilities?

Yes, you can audit PyTeal approval and clear state programs for vulnerabilities, as the static analysis supports scanning both TEAL and PyTeal codebases for stateful applications and smart signatures.

What is the best way to generate a vulnerability report for Algorand TEAL code?

The best way to generate a vulnerability report for Algorand TEAL code is using Tealer-based analysis that outputs structured findings with specific file references, vulnerability patterns, and actionable remediation guidance.

Does the Algorand vulnerability scanner work with stateless smart signatures?

Yes, the Algorand vulnerability scanner works with stateless smart signatures, supporting security audits across both stateless and stateful applications as well as approval and clear state programs.