algorand-vulnerability-scanner

Scan TEAL and PyTeal code for common Algorand smart contract vulnerabilities.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/iiammae/opero --skill algorand-vulnerability-scanner-iiammae
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/iiammae/opero --skill algorand-vulnerability-scanner-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill is designed to detect 11 common vulnerabilities in Algorand smart contracts, streamlining the audit process and ensuring security.

Core Features & Use Cases

  • Security Audit Tool: Automatically scans TEAL and PyTeal code for common security vulnerabilities.
  • Vulnerability Pattern Detection: Identifies and reports 11 critical patterns, such as rekeying attacks and missing validations.
  • Tealer Integration: Incorporates automated detection with Tealer tool for additional layer of security.

Quick Start

Use the 'algorand-vulnerability-scanner' to scan 'contracts_approval.teal' for potential security issues.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

To scan Algorand smart contracts for security vulnerabilities, you can use automated tools to analyze TEAL and PyTeal code, which identifies critical patterns like rekeying attacks and missing validations to streamline the audit process.

What common vulnerabilities can be detected in Algorand TEAL code?

Vulnerability scanning in Algorand TEAL code can detect 11 critical security patterns, including rekeying attacks and missing validations, by identifying and reporting these common threats to ensure blockchain application security.

Does Algorand vulnerability scanning work with PyTeal or only TEAL?

Algorand vulnerability scanning works with both PyTeal and TEAL code formats, allowing developers and auditors to automatically identify common security vulnerabilities across different smart contract implementations.

Do I need Tealer installed to run an Algorand smart contract security audit?

Yes, you need the Tealer static analysis tool installed to run automated vulnerability scans, as the audit requires Tealer for automated detection alongside manual review to confirm the identified security findings.

What is the best way to detect rekeying attacks in Algorand smart contracts?

The best way to detect rekeying attacks in Algorand smart contracts is through automated static analysis using Tealer integration, which identifies this specific vulnerability pattern among 11 critical security issues during the scan.

What are the limitations of automated vulnerability scanning for Algorand blockchain applications?

The limitation of automated vulnerability scanning for Algorand blockchain applications is that it requires manual review to confirm findings, meaning automated tools like Tealer cannot fully replace human analysis for ensuring complete smart contract security.