substrate-vulnerability-scanner

Scan Substrate FRAME pallets for seven critical security vulnerabilities in Rust code.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/keremtoker468-dotcom/restoran --skill substrate-vulnerability-scanner-keremtoker468-dotcom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/keremtoker468-dotcom/restoran/tree/main/.claude/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/keremtoker468-dotcom/restoran --skill substrate-vulnerability-scanner-keremtoker468-dotcom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill systematically scans Substrate/Polkadot pallets for 7 critical security vulnerabilities, preventing node crashes, DoS attacks, and unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Identifies arithmetic overflow, panics, weight issues, bad origins, and more.
  • Automated Auditing: Streamlines the security review process for Substrate runtimes and FRAME pallets.
  • Use Case: Before launching a new parachain, use this Skill to audit its custom pallets for common security flaws, ensuring a more robust and secure runtime.

Quick Start

Use the substrate-vulnerability-scanner skill to audit the 'pallets/my_pallet' directory for security vulnerabilities.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Substrate pallets for security vulnerabilities before launching a parachain?

To audit Substrate pallets for security vulnerabilities, scan the 'pallets/my_pallet' directory to detect arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. This prevents node crashes and unauthorized access by analyzing Rust code for specific vulnerability patterns.

What common security flaws affect Polkadot FRAME pallets in Rust?

Common security flaws affecting Polkadot FRAME pallets include arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Scanning Rust code for these vulnerability patterns identifies runtime risks and provides mitigation advice to ensure a robust runtime.

Can I automate runtime vulnerability scanning for custom Substrate pallets?

You can automate runtime vulnerability scanning for custom Substrate pallets by analyzing Rust code for specific vulnerability patterns. This streamlines the security review process by automatically detecting 7 critical security vulnerabilities and providing mitigation advice.

Does the Substrate vulnerability scanner detect arithmetic overflow and bad origin checks?

Yes, the Substrate vulnerability scanner detects arithmetic overflow and bad origin checks. It scans FRAME pallets for 7 critical security vulnerabilities, including panic DoS and incorrect weights, by analyzing Rust code and providing mitigation advice.

What are the limitations of using automated security audits for Substrate runtimes?

Automated security audits for Substrate runtimes are limited to detecting 7 specific vulnerability patterns like arithmetic overflow and bad origin checks. While they streamline security reviews by analyzing Rust code, manual verification remains necessary for complex logic flaws.