substrate-vulnerability-scanner

Scan Substrate FRAME pallets for arithmetic overflows and origin validation vulnerabilities.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill substrate-vulnerability-scanner-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill substrate-vulnerability-scanner-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill identifies critical security vulnerabilities in Substrate and Polkadot FRAME pallets that could lead to node crashes, denial-of-service attacks, or unauthorized privilege escalation.

Core Features & Use Cases

  • Automated Vulnerability Detection: Scans Rust code for 7 critical patterns including arithmetic overflows, panic-prone code, and incorrect weight calculations.
  • Security Hardening: Provides actionable mitigations and code-level fixes for identified vulnerabilities.
  • Use Case: Before deploying a custom parachain or runtime upgrade, use this skill to perform a comprehensive security audit of your dispatchable functions and storage logic.

Quick Start

Use the substrate-vulnerability-scanner to analyze the pallets in the current directory for critical security vulnerabilities.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Substrate runtime modules for security vulnerabilities?

Scanning FRAME pallets for arithmetic overflows, panic-prone code, and improper origin validation detects critical Substrate runtime vulnerabilities. This automated audit targets dispatchable extrinsic functions to ensure node stability and protocol integrity.

What security flaws can occur in Polkadot FRAME pallets?

Security flaws in Polkadot FRAME pallets include arithmetic overflows, panic-inducing code, incorrect weight calculations, and improper origin validation. These vulnerabilities can lead to node crashes, denial-of-service attacks, or unauthorized privilege escalation.

When do I need to perform a blockchain runtime security audit?

You need to perform a blockchain runtime security audit before deploying a custom parachain or executing a runtime upgrade. This pre-launch assessment ensures dispatchable functions and storage logic are free from critical node-crashing flaws.

Does this vulnerability scanner work with Rust and Substrate pallets?

Yes, the vulnerability scanner works with Rust and Substrate pallets by analyzing FRAME-based runtime code. It targets platform-specific security issues within pallet logic and dispatchable extrinsic functions.

How do I fix arithmetic overflow and panic risks in Substrate pallets?

To fix arithmetic overflow and panic risks in Substrate pallets, run an automated scan to identify the vulnerable code patterns. The audit provides actionable mitigations and code-level fixes to harden runtime security.