cairo-auditor

Audit Cairo smart contracts on Starknet for security vulnerabilities.

Updated Mar 3, 2026
One-click install
npx skills add https://github.com/Grinta-Protocol/Grinta-Prototipe-UI --skill cairo-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cairo-auditor
Source: https://github.com/Grinta-Protocol/Grinta-Prototipe-UI/tree/main/agents/skills/cairo-auditor
Command: npx skills add https://github.com/Grinta-Protocol/Grinta-Prototipe-UI --skill cairo-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify vulnerabilities and security patterns in Cairo/Starknet smart contracts, ensuring the safety and integrity of your code.

Core Features & Use Cases

  • Vulnerability Detection: Pinpoints common security flaws like reentrancy and logic bugs.
  • Security Pattern Analysis: Checks for adherence to best practices and identifies potential regressions.
  • Fix Generation: Provides suggestions for hardening contracts against known exploits.
  • Use Case: Integrate this skill into your CI/CD pipeline to automatically audit new smart contract deployments for security vulnerabilities before they go live.

Quick Start

Use the cairo-auditor skill to scan the contract file '/path/to/my_contract.cairo' for security vulnerabilities.

Frequently Asked Questions about cairo-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cairo smart contracts for security vulnerabilities on Starknet?

Auditing Cairo smart contracts on Starknet involves scanning code against a knowledge base of normalized findings to detect vulnerabilities like reentrancy and integer overflows. This process identifies security flaws and suggests hardened patterns for fixes and optimization.

What types of vulnerabilities can be detected in Starknet smart contracts?

Vulnerability detection in Starknet smart contracts pinpoints common security flaws like reentrancy, integer overflows, and logic bugs. Security pattern analysis also checks for adherence to best practices and identifies potential regressions in the code.

Can I integrate security auditing into my CI/CD pipeline for Cairo contracts?

Yes, you can integrate security auditing into a CI/CD pipeline to automatically audit new Cairo smart contract deployments. This ensures vulnerabilities are detected and hardened patterns are suggested before contracts go live.

How do I scan a Cairo contract file for reentrancy and logic bugs?

To scan a Cairo contract file for reentrancy and logic bugs, you run a security audit that analyzes the code against security modules. This identifies vulnerabilities and provides suggestions for hardening the contracts against known exploits.

Does vulnerability detection provide fix suggestions for integer overflows in Cairo code?

Yes, vulnerability detection for integer overflows in Cairo code provides fix suggestions. It analyzes the code against a knowledge base of security findings to detect issues and suggests hardened patterns to fix and optimize the contract.