algorand-vulnerability-scanner

Scan TEAL and PyTeal code for Algorand smart contract vulnerabilities.

9|2|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/hongmaple0820/agent-academy --skill algorand-vulnerability-scanner-hongmaple0820
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/hongmaple0820/agent-academy/tree/main/skills/design/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/hongmaple0820/agent-academy --skill algorand-vulnerability-scanner-hongmaple0820

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Algorand contracts can harbor security vulnerabilities; this skill provides automated scanning to identify vulnerabilities based on a defined set of patterns for TEAL and PyTeal.

Core Features & Use Cases

  • Scans TEAL and PyTeal code for a predefined vulnerability checklist derived from Trail of Bits' Not So Smart Contracts for Algorand.
  • Generates structured reports with references to affected files, severity levels, and actionable remediation guidance.
  • Useful for audits of stateful applications, smart signatures, and group-transaction workflows across repositories and codebases.

Quick Start

Run the scanner against your Algorand project to identify vulnerabilities in TEAL and PyTeal code and generate a structured security report.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

Scanning Algorand contracts for vulnerabilities involves checking TEAL and PyTeal code against 11 predefined vulnerability patterns and platform checks. This automated process identifies security flaws in stateful applications and generates structured reports with remediation guidance.

What types of vulnerabilities can an Algorand audit tool detect in TEAL and PyTeal?

Vulnerability detection in Algorand code involves matching against 11 vulnerability patterns and platform checks derived from the Not So Smart Contracts checklist. This identifies security flaws across stateful applications, smart signatures, and group-transaction workflows within project repositories.

Can I use automated security scanning for Algorand stateful applications and smart signatures?

Automated security scanning supports Algorand stateful applications and smart signatures by analyzing TEAL and PyTeal codebases. The scanner identifies vulnerabilities based on a defined set of patterns and generates structured reports containing severity levels and actionable remediation guidance.

How do I generate a structured security report for PyTeal codebases?

Generating a structured security report for PyTeal codebases requires running a vulnerability scanner across project repositories. The resulting report includes references to affected files, identified severity levels, and actionable remediation guidance for the security flaws found.

What is the best way to audit Algorand smart contracts for group-transaction workflow flaws?

Auditing Algorand smart contracts for group-transaction workflow flaws is best achieved by scanning TEAL and PyTeal code against a predefined vulnerability checklist. This surfaces actionable findings and generates structured reports with specific recommendations and remediation steps.

Does Algorand vulnerability scanning require specific dependencies or environments?

Algorand vulnerability scanning operates without external dependencies, allowing direct analysis of TEAL and PyTeal code. You can run the scanner across project repositories and codebases to identify security flaws and generate structured reports with remediation steps.