What problem does it solve? Algorand smart contracts have unique attack surfaces—rekeying, unchecked CloseRemainderTo fields, group transaction manipulation—that generic Solidity-oriented audit tools miss entirely. This Skill systematically detects 11 Algorand-specific vulnerability patterns in TEAL and PyTeal code before they reach production. ## Core Features & Use Cases - 11 Vulnerability Pattern Detection: Checks for rekeying attacks, unchecked transaction fees, missing group size validation, asset close-to issues, access control gaps, and more, each with severity ratings and code examples. - Tealer Integration: Runs Trail of Bits' Tealer static analyzer alongside manual pattern sweeps, with CI/CD commands for failing builds on critical findings. - Structured Audit Reports: Produces findings with file locations, vulnerable code snippets, attack scenarios, and concrete remediation code. - Use Case: Before deploying a PyTeal DeFi contract, run this Skill to discover that your payment handler never validates the RekeyTo field, then apply the provided fix to block account takeover attacks. ## Quick Start Scan the Algorand smart contracts in this repository for security vulnerabilities and report any findings with severity and fixes.
