cairo-vulnerability-scanner

Name: cairo-vulnerability-scanner
Availability: InStock
Author: rohanbhatia27

Automate vulnerability scanning of Cairo/StarkNet smart contracts for security issues.

1|Updated Apr 7, 2026

Search Tags:#security #smart contracts #vulnerability scanning #cairo #starknet

Ready to run

npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill cairo-vulnerability-scanner-rohanbhatia27

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cairo-vulnerability-scanner
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/cairo-vulnerability-scanner
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill cairo-vulnerability-scanner-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for robust security audits on Cairo/StarkNet smart contracts, identifying vulnerabilities such as arithmetic overflow and signature replay attacks.

Core Features & Use Cases

Smart Contract Auditing: Automatically scans Cairo smart contracts for critical vulnerabilities unique to the StarkNet platform.
Platform Detection: Identifies contract files, library modules, and configuration files, validating StarkNet-specific file extensions and framework markers.
Scanning Workflow: Offers a detailed process that includes arithmetic safety sweeps, L1 handler analysis, and L1-L2 bridge audit, including the use of Caracal and other tools.

Quick Start

Scan smart contracts with 'run-skills/cairo-vulnerability-scanner <directory>'

Frequently Asked Questions about cairo-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Cairo smart contracts for vulnerabilities on StarkNet?▼

Scanning Cairo smart contracts for vulnerabilities involves running an automated analysis tool against your contract directory. This Skill identifies StarkNet-specific security issues like arithmetic overflows, address conversion problems, and L1-L2 messaging vulnerabilities.

What types of security vulnerabilities can be found in StarkNet contracts?▼

StarkNet contracts can contain arithmetic overflows, signature replay attacks, address conversion problems, and L1-L2 messaging issues. Vulnerability scanning automates the detection of these security flaws specific to the Cairo programming environment.

Can I audit L1-L2 bridge messaging and L1 handlers in Cairo contracts?▼

Yes, you can audit L1-L2 bridge messaging and L1 handlers in Cairo contracts. The scanning workflow performs L1 handler analysis and L1-L2 bridge audits to identify signature replay attacks and messaging vulnerabilities.

Does Cairo vulnerability scanning work with existing project files and configurations?▼

Cairo vulnerability scanning works with existing project files by detecting contract files, library modules, and configuration files. It validates StarkNet-specific file extensions and framework markers to ensure accurate code analysis.

What is the best way to detect arithmetic overflow issues in StarkNet smart contracts?▼

The best way to detect arithmetic overflow issues in StarkNet smart contracts is through automated vulnerability scanning. It performs arithmetic safety sweeps across your Cairo codebase to identify potential overflow vulnerabilities.

Do I need Python tools to perform security audits on Cairo contracts?▼

You need Python tools to perform security audits on Cairo contracts effectively. The vulnerability scanning workflow utilizes Python-based analysis tools, including Caracal, to automate the detection of StarkNet-specific security issues.