algorand-vulnerability-scanner

Detect 11 vulnerability patterns in Algorand TEAL/PyTeal smart contracts.

Updated Mar 27, 2026
One-click install
npx skills add https://github.com/erenisiklar/Pusula --skill algorand-vulnerability-scanner-erenisiklar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/erenisiklar/Pusula --skill algorand-vulnerability-scanner-erenisiklar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Algorand vulnerability scanning helps security teams automatically identify and report 11 common vulnerabilities in TEAL/PyTeal contracts, accelerating secure auditing.

Core Features & Use Cases

  • Detects 11 vulnerability patterns specific to Algorand, including rekeying, group transaction manipulation, and asset-related risks.
  • Supports TEAL and PyTeal projects, aiding pre-audit security assessments, remediation validation, and training.
  • Use cases include baseline scanning on new contracts, validating fixes, and integrating into CI for secure deployments.

Quick Start

Run the Algorand vulnerability scanner against your TEAL/PyTeal contracts to identify 11 vulnerability patterns and produce a findings report.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Algorand smart contract security audits?

You can automate Algorand smart contract security audits by scanning TEAL and PyTeAL codebases to detect 11 known vulnerability patterns. The scanner outputs structured findings with severity levels and remediation guidance for actionable results.

What vulnerabilities can static analysis detect in TEAL and PyTeal contracts?

Static analysis for TEAL and PyTeal contracts can detect 11 vulnerability patterns specific to Algorand, including rekeying risks, group transaction manipulation, and asset-related risks, providing structured findings with severity and remediation guidance.

How do I integrate vulnerability scanning into a CI pipeline for Algorand?

Integrate vulnerability scanning into CI pipelines for Algorand by running the scanner against TEAL and PyTeal contracts to produce machine-readable outputs. This enables automated security checks during secure deployments.

Can I use this scanner for pre-audit security assessments on PyTeal projects?

Yes, you can use this scanner for pre-audit security assessments on PyTeal projects. It supports baseline scanning on new contracts and validates fixes by identifying vulnerability patterns and providing remediation guidance.

What is the best way to validate security fixes in Algorand smart contracts?

The best way to validate security fixes in Algorand smart contracts is by running an automated vulnerability scan on the updated TEAL or PyTeal codebase. The scanner detects 11 known patterns and provides actionable remediation guidance.