skills.rest
Superlend
SuperlendOFFICIAL
Explore all skills by this author →
Website𝕏@SuperlendHQGitHub

cairo-vulnerability-scanner

Detect six vulnerability patterns in Cairo and StarkNet smart contracts.

Updated Jul 10, 2025
Search Tags:#vulnerability#static-analysis#security-audit#cairo#l1-l2#caracal#starknet
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill cairo-vulnerability-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cairo-vulnerability-scanner
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/building-secure-contracts/skills/cairo-vulnerability-scanner
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill cairo-vulnerability-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Cairo/StarkNet vulnerability scanner helps security researchers and auditors quickly identify and report critical weaknesses in Cairo contracts, automating the detection of patterns that commonly lead to exploits on StarkNet.

Core Features & Use Cases

  • Pattern-based vulnerability detection for Cairo/StarkNet contracts (6 patterns).
  • Automated reporting with file references and recommended mitigations.
  • Integrates with Caracal and standard Cairo tooling to streamline audits.
  • Use Case: During an audit, scan a project to generate a structured report noting each vulnerability pattern, affected files, and suggested fixes.

Quick Start

Run the scanner on a Cairo project to generate a structured vulnerability report.

Frequently Asked Questions about cairo-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cairo contracts for StarkNet vulnerabilities?▼

You can audit Cairo contracts by scanning the project to identify vulnerabilities across 6 common patterns. The scanner generates a structured report noting each weakness, affected files, and recommended mitigations.

What types of security vulnerabilities can a Cairo smart contract scanner detect?▼

A Cairo smart contract scanner detects 6 established vulnerability patterns, specifically targeting critical weaknesses in Cairo contracts, cross-layer L1-L2 messaging, and signature verification on StarkNet.

Does the Cairo vulnerability scanner integrate with Caracal for static analysis?▼

Yes, the Cairo vulnerability scanner integrates with the Caracal static analysis tool. It combines pattern-based detection with standard Cairo tooling to streamline security audits and automated reporting.

How do I check for cross-layer messaging vulnerabilities in StarkNet projects?▼

To check for cross-layer messaging vulnerabilities in StarkNet projects, run an audit scanner that evaluates L1-L2 messaging and signature verification. It identifies critical weaknesses and provides remediation references.

Can I generate a structured security audit report for my Cairo project?▼

Yes, you can generate a structured security audit report for your Cairo project. Running the scanner produces an automated report detailing each detected vulnerability pattern, affected file references, and suggested fixes.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

cairo-vulnerability-scanner

Scan Cairo/StarkNet smart contracts for six critical vulnerability patterns.

Official
Advanced
erenisiklarerenisiklar

cairo-vulnerability-scanner

Identifies six critical Cairo/StarkNet vulnerability patterns and generates structured security reports with file references, severity, and fixes.

Community
Advanced
SuperlendSuperlend

cairo-vulnerability-scanner

Detect six vulnerability patterns in Cairo and StarkNet smart contracts.

Official
Advanced
iiammaeiiammae

cairo-vulnerability-scanner

Scan Cairo/StarkNet smart contracts for security vulnerabilities using static analysis.

Community
Advanced