cairo-vulnerability-scanner

Scan Cairo/StarkNet smart contracts for security vulnerabilities using static analysis.

Updated Jun 9, 2026

Search Tags:#security #smart contracts #vulnerability scanning #Cairo #StarkNet

Ready to run

npx skills add https://github.com/iiammae/opero --skill cairo-vulnerability-scanner-iiammae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cairo-vulnerability-scanner
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/cairo-vulnerability-scanner
Command: npx skills add https://github.com/iiammae/opero --skill cairo-vulnerability-scanner-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides automated scanning for security vulnerabilities in Cairo/StarkNet smart contracts, saving time and ensuring robust security for your projects.

Core Features & Use Cases

Security Scanning: Automatically identifies and reports on critical vulnerabilities like arithmetic overflows and signature replay.
Platform Support: Supports smart contracts on Cairo/StarkNet, aiding in the audit process for projects on the platform.
Use Case: Ideal for auditors or developers needing to assess the security of smart contracts prior to deployment, providing insights into common security issues.

Quick Start

Run the cairo-vulnerability-scanner skill on your StarkNet Cairo project directory to automatically scan for vulnerabilities.

Frequently Asked Questions about cairo-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Cairo smart contracts for security vulnerabilities on StarkNet?▼

To scan Cairo smart contracts for security vulnerabilities, you can automate the auditing process to identify critical issues like arithmetic overflows and signature replay. This provides robust security insights prior to contract deployment.

What types of vulnerabilities can automated static analysis detect in StarkNet contracts?▼

Automated static analysis detects StarkNet contract vulnerabilities by applying specific vulnerability patterns. It identifies and reports critical security issues such as arithmetic overflows and signature replay attacks.

Do I need to know the Cairo programming language to audit StarkNet smart contracts?▼

Yes, auditing StarkNet smart contracts requires knowledge of the Cairo programming language. This expertise is necessary to understand vulnerability patterns, interpret static analysis results, and navigate contract audit workflows effectively.

Can I use vulnerability scanning for L1-L2 bridge implementations and security compliance?▼

Yes, you can use vulnerability scanning for L1-L2 bridge implementations and security compliance. The automated static analysis applies directly to these workflows to ensure robust security for Cairo projects.

What is the best way to prepare a StarkNet Cairo project directory for automated security auditing?▼

The best way to prepare for automated security auditing is to organize your StarkNet Cairo project directory. Running the scanner on this directory automatically analyzes the smart contracts for common security issues.

Why does static analysis fail to catch all security issues in Cairo smart contracts?▼

Static analysis for Cairo smart contracts primarily identifies known vulnerability patterns like arithmetic overflows and signature replay. It may not catch all issues without complementary manual code review and deeper contract audit workflows.