substrate-vulnerability-scanner

Detect critical security vulnerabilities in Substrate/Polkadot pallets.

Updated Jun 9, 2026

Search Tags:#security audit #vulnerability scanning #substrate #pallet #polkadot

Ready to run

npx skills add https://github.com/iiammae/opero --skill substrate-vulnerability-scanner-iiammae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/iiammae/opero --skill substrate-vulnerability-scanner-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill scans Substrate/Polkadot pallets for critical vulnerabilities, ensuring security and reliability of runtime environments.

Core Features & Use Cases

Vulnerability Scanning: Identifies 7 critical patterns specific to Substrate/FRAME-based chains.
Security Auditing: Suitable for auditing custom Substrate pallets, FRAME runtime code, and pre-launch security assessments.
Use Case: Before launching a new Substrate chain, use this Skill to scan for arithmetic overflows, panic DoS attacks, and other critical vulnerabilities.

Quick Start

Run the substrate-vulnerability-scanner skill to scan your Substrate codebase for vulnerabilities.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Substrate pallets for security vulnerabilities before launch?▼

To scan Substrate pallets for vulnerabilities, run this skill against your Rust codebase to detect critical patterns like arithmetic overflow, panic DoS, incorrect weights, and bad origin checks for pre-launch validation.

What critical security vulnerabilities should I look for in Polkadot runtime code?▼

Critical security vulnerabilities in Polkadot runtime code include arithmetic overflows, panic DoS attacks, incorrect weight calculations, and bad origin checks. This skill detects 7 critical patterns specific to Substrate/FRAME-based chains.

Do I need a Rust development environment to audit FRAME runtime code?▼

Yes, you need a Rust-based development environment and familiarity with the Substrate framework to audit FRAME runtime code and interpret the detected vulnerability scanning results.

Can I use this for security auditing custom Substrate pallets?▼

Yes, you can use this skill for security auditing custom Substrate pallets. It scans FRAME runtime code to identify critical vulnerabilities suitable for pre-launch security assessments.

What is the best way to detect arithmetic overflow in Substrate pallets?▼

The best way to detect arithmetic overflow in Substrate pallets is to run an automated vulnerability scanner that checks your FRAME runtime code for critical security patterns.

Does vulnerability scanning cover incorrect weights and bad origin checks?▼

Yes, vulnerability scanning covers incorrect weights and bad origin checks. It detects these along with arithmetic overflow and panic DoS attacks across 7 critical patterns specific to Substrate/Polkadot chains.