algorand-vulnerability-scanner

Detect 11 Algorand vulnerability patterns in TEAL and PyTeal contracts.

6.5k|561|Updated Jan 14, 2026
One-click install
npx skills add https://github.com/trailofbits/skills --skill algorand-vulnerability-scanner-trailofbits
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: algorand-vulnerability-scanner
Source: https://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/algorand-vulnerability-scanner
Command: npx skills add https://github.com/trailofbits/skills --skill algorand-vulnerability-scanner-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Algorand vulnerability scanning for auditors who need to identify critical security patterns in Algorand TEAL and PyTeal contracts, bridging gaps in manual reviews.

Core Features & Use Cases

  • Detects 11 vulnerability patterns from the Not-So-Smart-Contracts database for Algorand
  • Provides structured guidance and references for remediation and testing
  • Suitable for pre-audit reviews, code reviews, and continuous security checks on Algorand projects

Quick Start

Run the vulnerability scanning workflow on your Algorand project to surface critical issues and suggested mitigations.

Frequently Asked Questions about algorand-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Algorand smart contracts for security vulnerabilities?

The scanner detects 11 Algorand-specific vulnerability patterns in TEAL and PyTeal code, providing structured guidance and references for remediation and testing to accelerate secure code reviews.

Does the Algorand vulnerability scanner work with Beaker-based applications?

Yes, the scanner supports Beaker-based apps, PyTeal contracts, and Algorand projects, detecting critical security patterns and providing suggested mitigations for continuous security checks.

How does TEAL vulnerability detection integrate with existing audit tooling?

The scanner integrates with Tealer and reference materials, applying pattern recognition across 11 Algorand vulnerability patterns to identify security issues in TEAL and PyTeal contracts.

What Algorand security patterns can I detect during a pre-audit review?

You can detect 11 Algorand-specific vulnerability patterns from the Not-So-Smart-Contracts database in TEAL and PyTeal code, surfacing critical issues with suggested mitigations.

Can I use this scanner for developer onboarding and educational training on Algorand security?

Yes, the scanner is suitable for educational training and developer onboarding across Algorand projects, helping developers recognize and remediate security vulnerabilities in TEAL and PyTeal contracts.