cosmos-vulnerability-scanner

Scan Cosmos SDK and CosmWasm codebases for consensus-critical vulnerabilities.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/keremtoker468-dotcom/restoran --skill cosmos-vulnerability-scanner-keremtoker468-dotcom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/keremtoker468-dotcom/restoran/tree/main/.claude/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/keremtoker468-dotcom/restoran --skill cosmos-vulnerability-scanner-keremtoker468-dotcom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill identifies and helps fix critical security vulnerabilities in Cosmos SDK blockchains and CosmWasm smart contracts, preventing chain halts and fund loss.

Core Features & Use Cases

  • Vulnerability Detection: Scans for 9 specific consensus-critical patterns like non-determinism, incorrect signers, and ABCI panics.
  • Code Auditing: Essential for pre-launch security assessments, post-incident investigations, and validating code changes.
  • Use Case: Before launching a new Cosmos chain, use this Skill to audit your custom modules and ensure they are free from consensus-breaking vulnerabilities.

Quick Start

Use the cosmos-vulnerability-scanner skill to audit the provided Cosmos SDK codebase for security flaws.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cosmos SDK blockchains for consensus-critical vulnerabilities?

To audit Cosmos SDK blockchains for consensus-critical vulnerabilities, scan your custom modules using static analysis to identify 9 specific patterns like non-determinism and ABCI panics. This prevents chain halts and fund loss.

What security flaws should I look for in CosmWasm smart contracts?

When checking CosmWasm smart contracts for security flaws, scan the Rust codebase for 9 consensus-critical vulnerabilities including incorrect signer validation and non-determinism to prevent chain halts and fund loss.

Can static analysis detect non-determinism and ABCI panics in Cosmos chains?

Yes, static analysis can detect non-determinism and ABCI panics in Cosmos chains by analyzing Go and Rust codebases using pattern matching to identify and report these specific consensus-critical security risks.

When do I need to run a vulnerability scanner on my blockchain codebase?

Run a vulnerability scanner on your blockchain codebase during pre-launch security assessments, post-incident investigations, or when validating code changes to ensure custom modules are free from consensus-breaking vulnerabilities.

Does this vulnerability scanner support both Go and Rust codebases?

Yes, the vulnerability scanner supports both Go and Rust codebases by using static analysis and pattern matching to audit Cosmos SDK blockchains and CosmWasm contracts respectively for consensus-critical security risks.