skills.rest
manuelbrandner85
manuelbrandner85COMMUNITY
Explore all skills by this author →
GitHub

cosmos-vulnerability-scanner

Scan Cosmos SDK modules and CosmWasm contracts for consensus-critical vulnerabilities.

Updated Nov 23, 2025
Search Tags:#security#vulnerability#audit#sdk#blockchain#cosmos#ibc
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill cosmos-vulnerability-scanner-manuelbrandner85
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill cosmos-vulnerability-scanner-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies consensus-critical vulnerabilities in Cosmos SDK modules and CosmWasm contracts that could lead to chain halts, fund loss, or state divergence.

Core Features & Use Cases

  • Parallel Vulnerability Scanning: Spawns specialized agents to analyze non-determinism, ABCI logic, IBC integrations, and EVM-Cosmos state synchronization.
  • Consensus-Path Analysis: Focuses exclusively on code reachable from critical execution paths like BeginBlock, EndBlock, and msg_server handlers.
  • Use Case: Use this before a mainnet launch or major upgrade to verify that custom modules and IBC integrations are free from state-desync bugs and reentrancy vulnerabilities.

Quick Start

Use the cosmos-vulnerability-scanner skill to perform a full security audit on the current repository codebase.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cosmos SDK modules for consensus-critical vulnerabilities?▼

To audit Cosmos SDK modules, scan the codebase against 25 core and 16 IBC vulnerability patterns. This validates code reachable from BeginBlock, EndBlock, and msg_server handlers to identify chain halts, fund loss, and state divergence.

Can I scan CosmWasm contracts for reentrancy and state desync bugs?▼

Yes, you can scan CosmWasm contracts for reentrancy and state desync bugs. The scanner validates contracts against 3 specific CosmWasm vulnerability patterns to prevent consensus failures and fund loss.

How does IBC integration vulnerability scanning work for blockchain state divergence?▼

IBC integration vulnerability scanning works by spawning parallel agents to analyze IBC integrations. It validates code against 16 IBC vulnerability patterns to detect state synchronization issues and prevent chain desync.

Does this vulnerability scanner support EVM-Cosmos state synchronization analysis?▼

Yes, the vulnerability scanner supports EVM-Cosmos state synchronization analysis. It validates code against 10 EVM vulnerability patterns by spawning specialized agents to detect consensus-critical flaws.

What's the best way to perform a pre-launch security assessment for a custom x/ module?▼

The best way to perform a pre-launch security assessment for a custom x/ module is to execute a full vulnerability scan. This targets custom modules to verify code is free from non-determinism and consensus-path flaws.

When do I need to scan for non-determinism in ABCI logic?▼

You need to scan for non-determinism in ABCI logic before mainnet launches or major upgrades. This identifies consensus-critical vulnerabilities in BeginBlock and EndBlock execution paths that could cause chain halts.

Related Skills

Explore More Software Engineering Skills→
hongmaple0820hongmaple0820
9

cosmos-vulnerability-scanner

Scan Cosmos SDK and CosmWasm code for consensus-critical vulnerabilities.

Community
Advanced
ayehiaaayehiaa

cosmos-vulnerability-scanner

Detect consensus-critical vulnerabilities in Cosmos SDK modules and CosmWasm contracts.

Community
Advanced
cuoreinpacecuoreinpace

web3-testing

Test Solidity smart contracts with Hardhat and Foundry frameworks.

Community
Advanced
alicangnllalicangnll

Web3 Vulnerabilities

Analyze blockchain smart contracts for reentrancy, integer overflow, and logic bugs.

Community
Advanced