algorand-vulnerability-scanner

Scan Algorand TEAL and PyTeal smart contracts for 11 common vulnerabilities.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill algorand-vulnerability-scanner-ramprasad4121
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/Ramprasad4121/srp --skill algorand-vulnerability-scanner-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tealer, and includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill systematically scans Algorand smart contracts (TEAL/PyTeal) for 11 common and critical platform-specific security vulnerabilities, helping to secure your decentralized applications.

Core Features & Use Cases

  • Comprehensive Vulnerability Detection: Identifies 11 distinct vulnerability patterns unique to Algorand's transaction model, including rekeying attacks, unchecked fees, and access control issues.
  • Automated Analysis: Integrates with tools like Tealer for automated detection and provides detailed reports with code references and severity.
  • Use Case: When auditing an Algorand DeFi project, use this Skill to perform a thorough pre-deployment security check, ensuring all critical vulnerabilities are identified and addressed before launch.

Quick Start

Use the algorand-vulnerability-scanner skill to scan the file 'approval_program.py' for security vulnerabilities.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Algorand smart contracts for rekeying attacks and other vulnerabilities?

Auditing Algorand smart contracts for rekeying attacks requires static analysis of TEAL or PyTeal code to identify 11 critical vulnerabilities, including unchecked transaction fees and access control issues, before deployment.

Can I scan PyTeal code for missing field validations before deploying to Algorand?

Scanning PyTeal code detects missing field validations by utilizing automated tools like Tealer and manual pattern matching to comprehensively identify access control problems and other security issues.

Does Tealer detect unchecked transaction fees in Algorand TEAL programs?

Tealer detects unchecked transaction fees in Algorand TEAL programs through automated static analysis, generating detailed vulnerability reports with code references and severity levels for comprehensive security auditing.

What is the best way to perform a pre-deployment security check on Algorand DeFi projects?

Pre-deployment security checks for Algorand DeFi projects are best performed by systematically scanning TEAL and PyTeal smart contracts to identify platform-specific vulnerabilities like rekeying attacks and missing validations before launch.

What types of access control problems can Algorand vulnerability scanning identify?

Algorand vulnerability scanning identifies access control problems using static analysis to detect 11 distinct vulnerability patterns unique to Algorand's transaction model, ensuring decentralized applications are secured against critical threats.

How do I scan an approval program for security vulnerabilities in Algorand?

Scanning an approval program for security vulnerabilities involves running automated analysis on the TEAL or PyTeal source file to detect 11 common Algorand-specific issues, providing detailed reports with code references and severity.