COSMOS-SCAN

Identify security vulnerabilities in Cosmos SDK modules, CosmWasm contracts, and IBC flows.

56|9|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill cosmos-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: COSMOS-SCAN
Source: https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/tree/main/skills/cosmos-scanner
Command: npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill cosmos-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security teams and AI-assisted auditors identify vulnerabilities across Cosmos SDK modules (Go), CosmWasm contracts (Rust/WASM), and IBC protocol interactions, enabling safer cross-chain applications.

Core Features & Use Cases

  • Authorization & Access Controls: detect missing admin/auth checks in module and contract code.
  • IBC & Cross-Chain Security: validate channel, packet, and timeout handling to prevent cross-chain exploits.
  • Audit Readiness: produces structured patterns, references, and workflow guidance for Cosmos security reviews.

Quick Start

Run an audit workflow against a Cosmos-based project to initiate a risk-focused vulnerability assessment with guided patterns and recommendations.

Frequently Asked Questions about COSMOS-SCAN

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit CosmWasm smart contracts for security vulnerabilities?

To audit CosmWasm smart contracts, you analyze Rust/WASM code to identify missing admin checks and apply CosmWasm-specific safety patterns and mitigations to prevent cross-contract interaction exploits.

How do I validate IBC packet handling to prevent cross-chain exploits?

Validating IBC packet handling requires analyzing channel, packet, and timeout mechanisms within Inter-Blockchain communication flows to enforce IBC security and prevent cross-chain exploits across Cosmos chains.

What security checks should I perform on Cosmos SDK modules?

Cosmos SDK module security checks involve analyzing Go code for missing authorization and access controls, ensuring safety checks align with IBC security and migration practices across chains like Osmosis and Juno.

Can I use this to detect missing authorization checks in Cosmos blockchain code?

Yes, you can detect missing authorization and access controls in both Cosmos SDK modules and CosmWasm contracts, producing structured patterns and workflow guidance for comprehensive security reviews.

What is the best way to review migration practices for CosmWasm contracts?

The best way to review CosmWasm migration practices is to apply guided patterns and mitigations aligned with CosmWasm security standards, ensuring structured audit readiness for contracts across chains like Neutron.