substrate-vulnerability-scanner

Scan Substrate FRAME pallets for seven critical security vulnerabilities.

1|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/allanninal/claude-code-skills --skill substrate-vulnerability-scanner-allanninal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/allanninal/claude-code-skills/tree/main/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/allanninal/claude-code-skills --skill substrate-vulnerability-scanner-allanninal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies critical security vulnerabilities within Substrate and Polkadot FRAME pallets, preventing potential node crashes, DoS attacks, and unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Scans for 7 specific, high-impact vulnerability patterns unique to Substrate.
  • Code Analysis: Analyzes Rust code for arithmetic overflows, panics, weight misconfigurations, and access control flaws.
  • Use Case: Before deploying a new custom pallet on a Polkadot parachain, use this Skill to perform a thorough security audit and ensure it adheres to best practices.

Quick Start

Scan the current project's pallets for critical security vulnerabilities.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Substrate FRAME pallets for security vulnerabilities?

Scanning Substrate FRAME pallets for security vulnerabilities involves analyzing Rust code to identify patterns like arithmetic overflows, panic DoS, incorrect weights, and bad origin checks, providing specific fixes to secure your runtime.

What security vulnerabilities should I audit for in Polkadot runtime pallets?

You should audit Polkadot runtime pallets for 7 critical security vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks to prevent node crashes and unauthorized access.

How do I detect arithmetic overflow and panic DoS in Rust pallets?

You detect arithmetic overflow and panic DoS in Rust pallets by analyzing the code for unsafe mathematical operations and unhandled states that could crash the node, ensuring all dispatchable functions use safe arithmetic.

Can I use an automated tool to check incorrect weights and bad origin checks in Substrate?

Yes, you can use an automated scanner to check incorrect weights and bad origin checks in Substrate by analyzing your FRAME pallet code against known vulnerability patterns and providing targeted fixes.

When should I perform a security audit on my custom Polkadot parachain pallet?

You should perform a security audit on your custom Polkadot parachain pallet before deployment to identify critical vulnerabilities like access control flaws and weight misconfigurations, ensuring it adheres to runtime best practices.