algorand-vulnerability-scanner

Scan Algorand TEAL or PyTeal smart contracts for 11 common vulnerabilities.

Updated Feb 13, 2026
One-click install
npx skills add https://github.com/fjor1025/InfoSec-Framework --skill algorand-vulnerability-scanner-fjor1025
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/fjor1025/InfoSec-Framework/tree/main/ClaudeSkills/plugins/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/fjor1025/InfoSec-Framework --skill algorand-vulnerability-scanner-fjor1025

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically scans Algorand smart contracts (TEAL and PyTeal) for 11 critical platform-specific security vulnerabilities, helping to prevent common exploits.

Core Features & Use Cases

  • Automated Vulnerability Detection: Identifies 11 common Algorand-specific security flaws.
  • Code Analysis: Analyzes TEAL assembly or PyTeal code for patterns like rekeying attacks, unchecked transaction fees, and access control issues.
  • Use Case: When auditing an Algorand DeFi project, use this Skill to quickly identify potential rekeying vulnerabilities in the approval program before they can be exploited.

Quick Start

Use the algorand-vulnerability-scanner skill to scan the file 'approval_program.py' for common Algorand vulnerabilities.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

To scan Algorand smart contracts for security vulnerabilities, you can use an automated scanner to analyze TEAL assembly or PyTeal code for 11 common flaws including rekeying attacks, unchecked transaction fees, and access control issues. It outputs detailed findings with severity levels and recommended fixes.

What types of vulnerabilities affect Algorand TEAL and PyTeal code?

Common Algorand TEAL and PyTeal vulnerabilities include rekeying attacks, unchecked transaction fees, and access control issues. A dedicated vulnerability scanner systematically analyzes code patterns to identify these 11 platform-specific security flaws before they can be exploited.

Can I audit PyTeal approval programs for rekeying attacks automatically?

Yes, you can automatically audit PyTeal approval programs for rekeying attacks by running an automated vulnerability detection tool. The scanner analyzes the PyTeal code for specific malicious patterns and provides detailed findings with severity and recommended fixes.

Does the Algorand vulnerability scanner work with both TEAL and PyTeal?

Yes, the Algorand vulnerability scanner works with both TEAL assembly and PyTeal code. It analyzes both formats for specific dangerous patterns to identify 11 common security vulnerabilities, providing detailed findings with severity and recommended fixes.

What is the best way to detect access control issues in Algorand DeFi projects?

The best way to detect access control issues in Algorand DeFi projects is to use an automated vulnerability scanner that analyzes approval programs for specific pattern flaws. This approach quickly identifies potential access control vulnerabilities before they can be exploited.

What are the limitations of automated PyTeal vulnerability scanning?

Automated PyTeal vulnerability scanning identifies 11 common Algorand-specific security flaws by analyzing code for specific patterns. While it provides detailed findings with severity and recommended fixes, it focuses on known vulnerability patterns rather than complex custom business logic flaws.