cosmos-vulnerability-scanner

Scan Cosmos SDK code for nine consensus-critical vulnerabilities.

Updated Mar 27, 2026
One-click install
npx skills add https://github.com/erenisiklar/Pusula --skill cosmos-vulnerability-scanner-erenisiklar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/erenisiklar/Pusula --skill cosmos-vulnerability-scanner-erenisiklar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scans Cosmos SDK blockchain code for nine consensus-critical vulnerabilities to prevent chain halts and fund loss.

Core Features & Use Cases

  • Identify non-deterministic behavior in consensus-critical paths and flag inconsistencies
  • Detect incorrect signer usage, potential authorization bypasses, and panics in ABCI
  • Provide prioritized remediation guidance and pattern references for Cosmos chains and CosmWasm contracts

Quick Start

Run the vulnerability scanner on your Cosmos codebase to generate a security report detailing detected patterns

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Cosmos SDK code for non-determinism and other consensus vulnerabilities?

To scan Cosmos SDK code for non-determinism, run the scanner on your codebase to detect consensus-critical vulnerabilities and generate a security report with file references and remediation guidance.

What causes chain halts in Cosmos blockchains and how can I find these issues before launch?

Chain halts in Cosmos blockchains are often caused by non-deterministic behavior, incorrect signers, or ABCI panics. You can find these issues during pre-launch checks by scanning modules and CosmWasm contracts for nine critical vulnerabilities.

Can I use this scanner to audit CosmWasm contracts for ABCI panics and authorization bypasses?

Yes, you can scan CosmWasm contracts to detect potential authorization bypasses and ABCI panics, providing prioritized remediation guidance and pattern references to harden your Cosmos chain.

What is the best way to investigate incidents of fund loss in a Cosmos blockchain?

The best way to investigate fund loss incidents is applying a vulnerability scanner to the Cosmos SDK codebase to identify incorrect signer usage and rounding issues, yielding actionable findings with file references.

Does this vulnerability scanner detect rounding errors in consensus-critical paths?

Yes, the vulnerability scanner detects rounding errors in consensus-critical paths by enforcing strict patterns and flagging inconsistencies that could lead to consensus failures or fund loss.