algorand-vulnerability-scanner

Scan Algorand smart contracts in TEAL or PyTeal for 11 common vulnerabilities.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/keremtoker468-dotcom/restoran --skill algorand-vulnerability-scanner-keremtoker468-dotcom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/keremtoker468-dotcom/restoran/tree/main/.claude/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/keremtoker468-dotcom/restoran --skill algorand-vulnerability-scanner-keremtoker468-dotcom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill systematically scans Algorand smart contracts (TEAL/PyTeal) for 11 critical, platform-specific security vulnerabilities, helping to prevent costly exploits and ensure code integrity.

Core Features & Use Cases

  • Comprehensive Vulnerability Detection: Identifies common Algorand security pitfalls like rekeying attacks, unchecked transaction fees, and access control issues.
  • Automated Reporting & Fixes: Provides detailed findings with file references, severity, and actionable recommendations for remediation.
  • Use Case: Before deploying a new DeFi protocol on Algorand, use this Skill to perform a thorough security audit of your approval and clear state programs, identifying and fixing potential vulnerabilities early in the development cycle.

Quick Start

Use the algorand-vulnerability-scanner skill to audit the smart contract code in the 'contracts/' directory.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Algorand smart contracts for security vulnerabilities?

To audit Algorand smart contracts, you can scan TEAL or PyTeal code for 11 common vulnerabilities, including rekeying attacks and unchecked transaction fees. This skill utilizes static analysis and pattern matching to identify security flaws and suggest fixes.

What types of vulnerabilities can be detected in PyTeal and TEAL code?

Vulnerability scanning in PyTeal and TEAL detects 11 platform-specific issues such as rekeying attacks, unchecked transaction fees, and access control flaws. It uses static analysis to pinpoint these security risks and provides actionable remediation recommendations.

How do I run a security audit on Algorand approval and clear state programs before deployment?

Run a security audit on Algorand approval and clear state programs by scanning the smart contract code in your directory. The scan performs static analysis to identify access control issues and other flaws, outputting detailed findings with severity levels and suggested fixes.

Does this vulnerability scanner require tealer to analyze Algorand contracts?

Yes, the vulnerability scanner requires the tealer dependency to analyze Algorand contracts. It leverages tealer alongside manual pattern matching to perform static analysis on your TEAL or PyTeal files and detect 11 critical security vulnerabilities.

Can I use static analysis to find rekeying attacks in Algorand smart contracts?

Yes, you can use static analysis to find rekeying attacks in Algorand smart contracts. The scanner checks TEAL and PyTeal approval programs for rekeying vulnerabilities and other access control issues, generating reports with file references and remediation steps.

What is the best way to scan DeFi protocol code on Algorand for access control issues?

The best way to scan DeFi protocol code on Algorand for access control issues is using static analysis tailored for TEAL and PyTeal. It identifies 11 specific vulnerabilities and provides detailed reports with actionable fixes to ensure code integrity before deployment.