algorand-vulnerability-scanner

Detect 11 known vulnerability patterns in Algorand TEAL and PyTeal source files.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill algorand-vulnerability-scanner-mejango
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/building-secure-contracts/skills/not-so-smart-contracts-scanners/algorand-vulnerability-scanner
Command: npx skills add https://github.com/mejango/juicy-vision --skill algorand-vulnerability-scanner-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and reports Algorand smart contract vulnerabilities in TEAL and PyTeal projects, helping security teams reduce audit time and improve code quality.

Core Features & Use Cases

  • Scans source files for 11 Algorand-specific vulnerability patterns (e.g., Rekeying, CloseRemainderTo, Group Size, Access Controls).
  • Supports both TEAL and PyTeal codebases and is suitable for pre-audit reviews, security testing, and security training.
  • Provides structured findings and remediation guidance for real-world Algorand deployments.

Quick Start

Run the vulnerability scanner against your Algorand TEAL/PyTeal project to discover and fix vulnerabilities. For automated checks, install Tealer and run: tealer contract.teal --detect all, or scan PyTeal sources with a compatible workflow.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Algorand smart contracts for security vulnerabilities?

Scan Algorand smart contracts for vulnerabilities by analyzing TEAL and PyTeal source files to detect 11 known vulnerability patterns, including Rekeying, CloseRemainderTo, and Group Size issues. The scanner provides structured findings and remediation guidance.

What vulnerabilities can be detected in TEAL and PyTeal code?

TEAL and PyTeal code can be checked for 11 Algorand-specific vulnerability patterns such as Rekeying, CloseRemainderTo, Group Size, and Access Controls. The analysis identifies these issues in source files and transaction patterns to help reduce audit time.

Do I need Tealer to run automated vulnerability detection on Algorand contracts?

Tealer is required for automated vulnerability detection on Algorand contracts. Install Tealer and run commands like 'tealer contract.teal --detect all' to automate checks, or scan PyTeal sources with a compatible workflow for pre-audit reviews.

Can I use this scanner for PyTeal projects or does it only support TEAL?

The scanner supports both PyTeal (.py) and TEAL (.teal) source files. It analyzes both codebases to identify Algorand smart contract vulnerabilities, making it suitable for security testing and pre-audit reviews across different project implementations.

What's the best way to prepare for an Algorand smart contract security audit?

Prepare for an Algorand security audit by running vulnerability scans on TEAL and PyTeal source files to detect 11 known vulnerability patterns. This pre-audit review identifies issues like Rekeying and Access Controls early, providing structured findings and remediation guidance before formal auditing.

When should I run an Algorand vulnerability scan during development?

Run an Algorand vulnerability scan during pre-audit reviews and security testing phases before real-world deployment. Scanning TEAL and PyTeal code early helps detect 11 known vulnerability patterns, reducing audit time and improving code quality prior to mainnet release.