security_audit

Audit Substrate runtime Rust code and pallets for security vulnerabilities.

207|112|Updated Aug 10, 2020
One-click install
npx skills add https://github.com/galacticcouncil/hydration-node --skill security-audit-galacticcouncil
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_audit
Source: https://github.com/galacticcouncil/hydration-node/tree/main/.claude/skills/security_audit
Command: npx skills add https://github.com/galacticcouncil/hydration-node --skill security-audit-galacticcouncil

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security audits of Substrate runtimes and pallets to identify, reason about, and remediate vulnerabilities that could lead to fund loss, replays, or governance-time issues.

Core Features & Use Cases

  • Threat discovery: Enumerates potential attack paths across runtime code, storage, and cross-pallet interactions.
  • Adversarial reasoning: Applies structured attacker perspective to stress-test logic and identify edge cases, origin & permission gaps, and accidental backdoors.
  • Remediation guidance: Produces concrete fixes, suggested unit tests, and safe-defaults to harden the runtime.

Quick Start

Provide an audit plan and run a targeted scan on the runtime to generate a prioritized report.

Frequently Asked Questions about security_audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Substrate runtime for security vulnerabilities?

Auditing a Substrate runtime involves analyzing in-scope Rust pallets to identify origin checks, storage patterns, and cross-pallet interactions. It produces a structured findings report with prioritized issues, supporting evidence, and concrete fixes for developer remediation.

What attack vectors should I look for in Substrate pallets?

Substrate pallet attack vectors include origin and permission gaps, storage pattern flaws, cross-pallet interaction vulnerabilities, and accidental backdoors. Adversarial reasoning applies a structured attacker perspective to stress-test logic and identify these edge cases.

Does this security audit require specific dependencies to scan Rust code?

No specific dependencies are required to perform this security audit. The process directly analyzes your Substrate runtime Rust code and pallets to uncover exploit paths and determine real-world risk without needing external tooling components.

How do I remediate governance-time issues and fund loss risks in my runtime?

To remediate governance-time issues and fund loss risks, you apply the structured findings report generated during the audit. This report provides concrete fixes, suggested unit tests, and safe-defaults to harden the runtime effectively.

What is the best way to uncover privileged pathways in Substrate code?

The best way to uncover privileged pathways is through targeted adversarial reasoning during a security audit. This method stresses runtime logic to identify exploit paths and determine the real-world risk of accidental backdoors.