skills.rest
erenisiklar
erenisiklarCOMMUNITY
Explore all skills by this author →
GitHub

cairo-vulnerability-scanner

Identifies six critical Cairo/StarkNet vulnerability patterns and generates structured security reports with file references, severity, and fixes.

Updated Mar 27, 2026
Search Tags:#security#vulnerability#audit#reporting#static-analysis#cairo#starknet
One-click install
npx skills add https://github.com/erenisiklar/Pusula --skill cairo-vulnerability-scanner-erenisiklar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cairo-vulnerability-scanner
Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/cairo-vulnerability-scanner
Command: npx skills add https://github.com/erenisiklar/Pusula --skill cairo-vulnerability-scanner-erenisiklar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cairo/StarkNet contracts often harbor platform-specific vulnerabilities. This skill scans for 6 critical patterns to help auditors identify high-severity issues early.

Core Features & Use Cases

  • Detects 6 critical vulnerability patterns unique to Cairo/StarkNet, including arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay.
  • Useful for auditing StarkNet projects, cross-layer messaging reviews, and pre-launch security assessments.
  • Generates structured reports with file references, severities, and actionable mitigations.

Quick Start

Run the vulnerability scanner on your Cairo/StarkNet codebase to generate a comprehensive vulnerability report.

Frequently Asked Questions about cairo-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit StarkNet contracts for security vulnerabilities?▼

To audit StarkNet contracts for security vulnerabilities, you can scan your codebase to identify arithmetic overflows, L1-L2 messaging issues, and signature replay flaws, generating a report with file references and fixes.

What critical security vulnerabilities are unique to Cairo smart contracts?▼

Critical security vulnerabilities unique to Cairo smart contracts include arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay, which static analysis helps detect early.

How do I generate a vulnerability report for Cairo code with severities and mitigations?▼

You generate a vulnerability report for Cairo code by running a static analysis scan, which outputs findings with specific file references, severity levels, and recommended mitigations for each identified flaw.

Can I use static analysis to detect L1-L2 messaging issues in StarkNet projects?▼

Yes, you can use static analysis to detect L1-L2 messaging issues in StarkNet projects by scanning the codebase against specific patterns designed to identify cross-layer messaging flaws.

How does static analysis identify address conversion problems in Cairo?▼

Static analysis identifies address conversion problems in Cairo by scanning the source code against known vulnerability patterns, flagging risky conversions and presenting them with actionable fixes.

What is the best way to find arithmetic overflow flaws before launching a StarkNet project?▼

The best way to find arithmetic overflow flaws before launching a StarkNet project is performing a pre-launch security assessment using static analysis to scan for critical vulnerability patterns.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

cairo-vulnerability-scanner

Scan Cairo/StarkNet smart contracts for six critical vulnerability patterns.

Official
Advanced
ianyimiianyimi
1

Testing Coverage

Analyze code coverage gaps and propose tests to meet standards.

Community
Basic
SuperlendSuperlend

cairo-vulnerability-scanner

Detect six vulnerability patterns in Cairo and StarkNet smart contracts.

Official
Advanced
hoonzinopehoonzinope

code-fixer

Apply targeted fixes from AI_REVIEW.md and log changes to AI_CHANGES.md.

Community
Intermediate