Implement IC-specific security patterns for Motoko and Rust canisters.
npx skills add https://github.com/dfinity/icskills --skill canister-security
Please help me install this Agent Skill. Skill: canister-security Source: https://github.com/dfinity/icskills/tree/main/skills/canister-security Command: npx skills add https://github.com/dfinity/icskills --skill canister-security
This Skill addresses critical security vulnerabilities inherent in Internet Computer (IC) canister development, preventing common exploits and ensuring robust application security.
pre_upgrade traps.Secure your Motoko canister by implementing the requireOwner guard for sensitive admin actions.
High-intent search queries and answers about installing and using this skill.
Prevent reentrancy attacks in IC canisters using the CallerGuard pattern, which protects against TOCTOU vulnerabilities by validating caller state before modifying canister data or handling token transfers.
Secure access control and reject anonymous principals in Motoko by implementing the requireOwner guard for sensitive admin actions, ensuring only authorized callers can modify canister state or execute restricted methods.
Ensure state integrity during async inter-canister calls by applying saga patterns, which maintain consistent canister state and safely handle callback traps when making asynchronous cross-canister requests.
IC canisters become non-upgradeable after a pre_upgrade trap because the trap prevents saving state before the upgrade, requiring safe upgrade patterns to ensure pre_upgrade hooks execute without failing.
Protect IC canisters from cycle drain attacks using cycle management patterns that monitor consumption and restrict unauthorized inter-canister calls, ensuring canister longevity and preventing malicious resource exhaustion.
These IC-specific security patterns support both Rust and Motoko canister development, providing access control, reentrancy prevention, and safe upgrade implementations for any canister modifying state or handling tokens.
dfinityDeliverable 1: Lorem ipsum dolor sitat, consectetur adipiscing elit, sed do eiusmod tempor incididuntSed ut...
Looping-AIApply security patterns to Motoko and Rust Internet Computer canisters.
dfinityDeploy and interact with ICRC-1 and ICRC-2 token ledgers on the Internet Computer.
telihaAudit Solidity smart contracts for security vulnerabilities and generate Markdown reports.