cosmos-vulnerability-scanner

Scan Cosmos SDK blockchains and CosmWasm contracts for consensus-critical vulnerabilities.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill cosmos-vulnerability-scanner-ofelixdev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill cosmos-vulnerability-scanner-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically scans Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 9 critical vulnerability patterns unique to Cosmos-based chains, including non-determinism, incorrect signers, ABCI panics, and rounding errors.
  • Code Auditing: Essential for auditing Cosmos SDK modules, reviewing CosmWasm smart contracts, and performing pre-launch security assessments.
  • Use Case: When auditing a new Cosmos chain, use this Skill to proactively identify and fix potential consensus-critical bugs before they can cause a chain halt.

Quick Start

Scan the current project for Cosmos SDK vulnerabilities.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Cosmos SDK modules for consensus-critical vulnerabilities?

To scan Cosmos SDK modules for consensus-critical vulnerabilities, use this tool to automatically detect 9 critical patterns including non-determinism, incorrect signers, and ABCI panics. It systematically audits custom modules to prevent chain halts and consensus failures.

What causes non-determinism in Cosmos blockchains and how is it detected?

Non-determinism in Cosmos blockchains causes consensus failures when nodes process the same transaction differently. This scanner detects non-deterministic code patterns alongside arithmetic errors and rounding issues by analyzing Cosmos SDK modules and CosmWasm smart contracts to prevent chain halts.

Can I audit CosmWasm smart contracts for security flaws before mainnet launch?

Yes, you can audit CosmWasm smart contracts for security flaws before mainnet launch. This scanner performs pre-launch security assessments to identify platform-specific issues like authorization flaws and ABCI panics, ensuring custom smart contracts do not cause fund loss or chain halts.

Does this vulnerability scanner detect ABCI panics and authorization flaws?

Yes, this vulnerability scanner detects ABCI panics and authorization flaws. It scans for 9 specific consensus-critical vulnerability patterns unique to Cosmos-based chains, systematically identifying these issues to prevent unexpected chain halts and secure custom modules.

What's the best way to prevent a chain halt during a Cosmos SDK upgrade?

The best way to prevent a chain halt during a Cosmos SDK upgrade is to proactively scan custom modules for consensus-critical bugs. This tool identifies platform-specific vulnerabilities like non-determinism and arithmetic errors before deployment, mitigating risks of chain halts and consensus failures.