Cairo Vulnerability Scanner

Scan Cairo/StarkNet smart contracts for arithmetic, messaging, and address conversion vulnerabilities.

1|12|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/ChatAndBuild/chatchat-skills --skill cairo-vulnerability-scanner-chatandbuild
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Cairo Vulnerability Scanner
Source: https://github.com/ChatAndBuild/chatchat-skills/tree/main/skills/cairo-vulnerability-scanner
Command: npx skills add https://github.com/ChatAndBuild/chatchat-skills --skill cairo-vulnerability-scanner-chatandbuild

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires caracal, cairo-lang, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies specific security vulnerabilities in Cairo/StarkNet smart contracts, preventing potential breaches and ensuring contract integrity.

Core Features & Use Cases

  • Smart Contract Security: Detects StarkNet-specific vulnerabilities such as arithmetic overflow, messaging flaws, and address conversion bugs.
  • Vulnerability Pattern Detection: Scans for 6 unique patterns that are critical for Cairo/StarkNet ecosystem security.
  • Use Case: Before deploying a smart contract on StarkNet, use this Skill to scan and fix vulnerabilities, enhancing contract security and trust.

Quick Start

Scan your Cairo/StarkNet smart contracts for vulnerabilities using the Cairo Vulnerability Scanner.

Frequently Asked Questions about Cairo Vulnerability Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Cairo smart contract for security vulnerabilities on StarkNet?

To scan a Cairo smart contract for security vulnerabilities, use this Skill to detect arithmetic overflow, messaging flaws, and address conversion issues. It requires Caracal for static analysis and applies custom logic to identify 6 unique vulnerability patterns.

What types of vulnerabilities can affect StarkNet smart contracts?

StarkNet smart contracts are vulnerable to arithmetic errors, messaging flaws, and address conversion bugs. This scanner identifies these specific patterns and other security weaknesses to ensure contract integrity before deployment.

Do I need Caracal and cairo-lang to run a StarkNet vulnerability scan?

Yes, running a StarkNet vulnerability scan requires Caracal for static analysis and the cairo-lang dependency. These tools provide the foundational environment needed to execute the contract-specific security checks.

Can I use static analysis to detect arithmetic overflow in Cairo contracts?

Yes, you can use static analysis to detect arithmetic overflow in Cairo contracts. This Skill leverages Caracal to perform static analysis, identifying arithmetic errors and other security flaws tailored to the StarkNet ecosystem.

When should I run a vulnerability scan on my Cairo smart contract?

You should run a vulnerability scan on your Cairo smart contract before deploying it to StarkNet. This ensures contract integrity by identifying and mitigating critical security vulnerabilities early in the development lifecycle.

What is the best way to check for messaging flaws in StarkNet contracts?

The best way to check for messaging flaws in StarkNet contracts is to use a tailored vulnerability scanner. This Skill detects messaging flaws alongside arithmetic errors and address conversion bugs using static analysis.