algorand-vulnerability-scanner

Scan Algorand smart contracts in TEAL or PyTeal for 11 security vulnerabilities.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill algorand-vulnerability-scanner-ofelixdev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill algorand-vulnerability-scanner-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill systematically scans Algorand smart contracts for 11 critical, platform-specific security vulnerabilities, helping to prevent costly exploits and ensure contract integrity.

Core Features & Use Cases

  • Comprehensive Vulnerability Detection: Identifies 11 common Algorand-specific security flaws, including rekeying attacks, unchecked transaction fees, and access control issues.
  • Automated Scanning: Integrates with tools like Tealer for automated detection and provides detailed reports with suggested fixes.
  • Use Case: When auditing an Algorand DeFi protocol, use this Skill to perform a pre-audit security assessment, identifying potential weaknesses before they can be exploited.

Quick Start

Scan the Algorand smart contract located at './contracts/approval.py' for common vulnerabilities.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan an Algorand smart contract for security vulnerabilities?

To scan an Algorand smart contract, use automated static analysis to detect security vulnerabilities. This Skill integrates Tealer and manual pattern matching to identify 11 common platform-specific flaws in TEAL or PyTeal code.

What types of vulnerabilities can an Algorand TEAL audit detect?

An Algorand TEAL audit detects 11 specific vulnerabilities including rekeying attacks, unchecked transaction fees, and access control flaws. It identifies these security issues using static analysis to provide detailed mitigation strategies.

Can I use this scanner to audit PyTeal smart contracts or does it only support TEAL?

Yes, you can audit PyTeal smart contracts as well as TEAL. It performs static analysis on both formats to identify access control flaws, rekeying attacks, and other common vulnerabilities.

Does the scanner use Tealer for automated vulnerability detection?

Yes, the scanner uses Tealer for automated vulnerability detection. It combines this static analysis tool with manual pattern matching to comprehensively audit Algorand smart contracts for security flaws.

What is the best way to prevent rekeying attacks in Algorand smart contracts?

The best way to prevent rekeying attacks is to run a pre-audit security assessment using static analysis. This scanner identifies rekeying vulnerabilities in TEAL or PyTeal code and provides specific mitigation strategies.

Why does my Algorand smart contract have an unchecked transaction fee vulnerability?

Unchecked transaction fee vulnerabilities occur when your smart contract fails to verify transaction costs. This scanner detects this flaw using static analysis and provides detailed reports with suggested fixes.