skills.rest
mejango
mejangoCOMMUNITY
Explore all skills by this author →
𝕏@me_jangoGitHub

cosmos-vulnerability-scanner

Detect Cosmos-specific security vulnerabilities in Cosmos SDK modules and CosmWasm contracts.

Updated Jan 17, 2026
Search Tags:#vulnerability#scanner#cosmos-sdk#cosmwasm#cosmos
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill cosmos-vulnerability-scanner-mejango
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/building-secure-contracts/skills/not-so-smart-contracts-scanners/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/mejango/juicy-vision --skill cosmos-vulnerability-scanner-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the detection of Cosmos-specific security vulnerabilities in Cosmos SDK modules and CosmWasm contracts, reducing the risk of chain halts and misbehavior.

Core Features & Use Cases

  • Detect 9 Cosmos vulnerability patterns (non-determinism, incorrect signers, ABCI panics, rounding errors, and more) across Go (Cosmos SDK) and Rust (CosmWasm) code.
  • Platform-aware analysis of BeginBlocker/EndBlocker, x/ modules, and message handlers for consensus-critical paths.
  • Generate structured reports with file references, severity levels, and practical remediation guidance suitable for audits of Cosmos-based chains.
  • Use cases include pre-launch security reviews, incident investigations, and ongoing governance integrity checks for Cosmos networks.

Quick Start

Run the cosmos-vulnerability-scanner against your codebase to produce a vulnerability report. The scanner searches for Cosmos-specific patterns, analyzes consensus-critical code, and outputs findings with file references and suggested fixes. The tool references the vulnerabilities patterns documented in resources/VULNERABILITY_PATTERNS.md.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Cosmos SDK modules for security vulnerabilities?▼

Scanning Cosmos SDK modules for security vulnerabilities involves analyzing Go code for 9 specific patterns like non-determinism and ABCI panics. The scanner reviews BeginBlocker and EndBlocker logic, then generates a structured report with file references and suggested fixes.

What Cosmos-specific vulnerability patterns should I look for before a chain launch?▼

Critical Cosmos vulnerability patterns include non-determinism, incorrect GetSigners usage, ABCI panics, and rounding errors. Detecting these 9 patterns across Cosmos SDK and CosmWasm code prevents chain halts and misbehavior during pre-launch security reviews.

Can I audit CosmWasm contracts for non-determinism using an automated scanner?▼

Automated auditing of CosmWasm contracts for non-determinism is possible with a scanner that analyzes Rust code and message handlers. It identifies consensus-critical vulnerabilities in CosmWasm apps and provides contextual file references along with remediation steps.

Does the Cosmos vulnerability scanner work with both Go and Rust code?▼

The Cosmos vulnerability scanner supports both Go and Rust code. It applies platform-aware analysis to Cosmos SDK modules in Go and CosmWasm contracts in Rust, reviewing BeginBlocker, EndBlocker, and message handler logic for consensus-critical paths.

What is the best way to check ABCI panic risks in Cosmos blockchains?▼

Checking ABCI panic risks in Cosmos blockchains is best done by scanning consensus-critical code paths for panic conditions. The scanner detects ABCI panics among 9 vulnerability patterns, delivering a structured report with severity levels and practical remediation guidance.

Why does my Cosmos chain halt during BeginBlocker or EndBlocker execution?▼

Cosmos chain halts during BeginBlocker or EndBlocker execution often stem from security vulnerabilities like non-determinism or ABCI panics. Scanning the codebase for these specific Cosmos vulnerability patterns helps identify the root cause and provides remediation guidance.

Related Skills

Explore More Software Engineering Skills→
SuperlendSuperlend

cosmos-vulnerability-scanner

Scan Cosmos SDK modules and CosmWasm contracts for nine vulnerability patterns.

Official
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
potpie-aipotpie-ai
5.6k

potpie-cli

Execute and explain Potpie CLI commands for troubleshooting and configuration.

Official
Intermediate
trailofbitstrailofbits
6.5k

cosmos-vulnerability-scanner

Detect nine vulnerability patterns in Cosmos SDK modules and CosmWasm contracts.

Official
Advanced