substrate-vulnerability-scanner

Detect critical Substrate/FRAME pallet vulnerabilities and report severity with file references.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill substrate-vulnerability-scanner-mejango
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/building-secure-contracts/skills/not-so-smart-contracts-scanners/substrate-vulnerability-scanner
Command: npx skills add https://github.com/mejango/juicy-vision --skill substrate-vulnerability-scanner-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Scans Substrate/Polkadot pallets for 7 critical vulnerabilities and reports them to help auditors identify and remediate security flaws early.

## Core Features & Use Cases

  • Detect seven vulnerability patterns unique to Substrate/FRAME-based chains.
  • Provide references and severity for each finding.
  • Useful during security audits of pallets, runtimes, and parachains.

Quick Start

Use the substrate-vulnerability-scanner skill to scan a Substrate-based project for common vulnerabilities and generate a prioritized report with file references.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Substrate pallets for security vulnerabilities?

To scan Substrate pallets for vulnerabilities, use this skill during runtime audits to detect arithmetic overflow, panics, weight misconfigurations, and bad-origin patterns. It outputs file references, severity levels, and actionable remediation guidance for each finding.

What critical vulnerabilities affect Polkadot parachains and FRAME pallets?

Critical vulnerabilities affecting Polkadot parachains and FRAME pallets include arithmetic overflow, runtime panics, weight misconfigurations, unsigned validation flaws, and bad-origin patterns. This skill identifies seven critical vulnerability patterns unique to Substrate-based chains.

Does this vulnerability scanner detect arithmetic overflow and bad-origin patterns in Rust runtimes?

Yes, this vulnerability scanner detects arithmetic overflow and bad-origin patterns in Rust runtimes. It is designed specifically for Substrate/FRAME-based chains and reports these critical flaws with severity levels and actionable file references.

How do I audit a Substrate runtime for weight misconfigurations and unsigned validation issues?

To audit a Substrate runtime for weight misconfigurations and unsigned validation issues, apply this skill to scan your pallets. It identifies these specific FRAME vulnerability patterns and provides prioritized reports with remediation guidance.

What is the best way to find panics in Substrate pallets during a security audit?

The best way to find panics in Substrate pallets during a security audit is to scan for critical flaws using this skill. It detects runtime panics alongside six other vulnerability patterns, outputting file references and severity levels to guide remediation.