Fuel Network Security Scanner

Audit Sway smart contracts for Fuel Network security vulnerabilities.

56|9|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill fuel-network-security-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Fuel Network Security Scanner
Source: https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/tree/main/skills/fuel-scanner
Command: npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill fuel-network-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams and developers identify vulnerabilities, misconfigurations, and risky patterns in Fuel Network smart contracts written in Sway, including UTXO handling, predicate logic, and multi-asset transfers.

Core Features & Use Cases

  • UTXO-aware audits for contracts, scripts, predicates, and libraries in Fuel projects.
  • Detection of common Fuel-specific issues such as UTXO double-spend risks, mis-specified AssetId handling, and storage access pitfalls.
  • Integrates with the Fuel toolchain (forc), fuels-rs, and local Fuel Core for end-to-end security reviews.

Quick Start

Execute the Fuel audit workflow against your Sway project to generate a security report.

Frequently Asked Questions about Fuel Network Security Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Fuel Network smart contracts written in Sway for security vulnerabilities?

To audit Fuel Network smart contracts written in Sway, you can execute a security scanner workflow that analyzes UTXO handling, predicate logic, and multi-asset transfers to identify vulnerabilities and misconfigurations across FuelVM projects.

What types of Sway security issues can be detected during a FuelVM audit?

A FuelVM audit detects common Sway security issues including UTXO double-spend risks, mis-specified AssetId handling, and storage access pitfalls within contracts, scripts, and predicates.

Do I need the forc toolchain and a local Fuel core node to run a Sway security audit?

Yes, you need the forc toolchain, fuels-rs, and access to a local or remote Fuel core node to execute the scanner, load metadata, and perform end-to-end security reviews of your Sway project.

Can I use this Sway scanner to review predicate logic and scripts in addition to standard contracts?

Yes, this Sway scanner performs UTXO-aware audits across contracts, scripts, predicates, and libraries within your Fuel projects to identify risky patterns and security vulnerabilities.

What is the best way to integrate a Sway security review into my Fuel development workflow?

The best way to integrate Sway security reviews is to execute the Fuel audit workflow against your project in development, CI, and security review stages to generate comprehensive security reports.

How does auditing UTXO handling in Sway differ from standard smart contract security checks?

Auditing UTXO handling in Sway specifically targets FuelVM risks like double-spend vulnerabilities and multi-asset transfer misconfigurations, whereas standard checks often focus on broader reentrancy or overflow issues.