skills.rest
ofelixdev
ofelixdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

substrate-vulnerability-scanner

Analyze Substrate FRAME pallets for seven critical security vulnerabilities.

Updated Feb 24, 2026
Search Tags:#security#auditing#blockchain#rust#vulnerability scanning#substrate#polkadot
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill substrate-vulnerability-scanner-ofelixdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill substrate-vulnerability-scanner-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically identifies and helps fix 7 critical security vulnerabilities within Substrate/Polkadot runtimes and FRAME pallets, preventing node crashes, DoS attacks, and unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Scans for arithmetic overflow, panics, weight/fee issues, unsigned transaction flaws, bad randomness, bad origin checks, and verify-first violations.
  • Code Analysis: Analyzes Rust code for specific patterns indicative of security risks.
  • Mitigation Guidance: Provides actionable advice and code examples for fixing identified vulnerabilities.
  • Use Case: Use this Skill when auditing custom Substrate pallets or reviewing FRAME runtime code to ensure the security and stability of a blockchain project.

Quick Start

Scan the current project's pallets for critical Substrate vulnerabilities.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Substrate pallets for arithmetic overflow and bad origin checks?▼

Scan Substrate pallets for arithmetic overflow and bad origin checks by analyzing Rust runtime code to identify insecure patterns, then apply the provided mitigation fixes to ensure blockchain stability.

What security vulnerabilities can occur in Polkadot FRAME runtime code?▼

Security vulnerabilities in Polkadot FRAME runtime code include arithmetic overflow, panics, incorrect weights, bad origin checks, unsigned transaction validation flaws, bad randomness, and verify-first violations.

How do I fix incorrect weights and unsigned transaction validation issues in Substrate?▼

Fix incorrect weights and unsigned transaction validation issues in Substrate by analyzing the Rust pallet code for risk patterns and applying actionable advice with code examples to prevent unauthorized access.

Does this vulnerability scanner detect panics and weight issues in custom FRAME pallets?▼

Yes, this vulnerability scanner detects panics and weight issues in custom FRAME pallets by analyzing Rust code for specific patterns indicative of these security risks and providing actionable fixes.

Why does my Substrate runtime crash from unhandled arithmetic overflow in pallets?▼

Your Substrate runtime crashes from unhandled arithmetic overflow because unmitigated calculations trigger panics, requiring a pallet audit to identify these specific patterns and apply proper overflow checks.

Related Skills

Explore More Software Engineering Skills→
manuelmauromanuelmauro
2

adding-pallets

Create and integrate a FRAME pallet into Substrate-based Moonbeam runtimes.

Community
Intermediate
keremtoker468-dotcomkeremtoker468-dotcom

substrate-vulnerability-scanner

Scan Substrate FRAME pallets for seven critical security vulnerabilities in Rust code.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate
xiaoniuge36xiaoniuge36
6

code-review

Analyze code for standards compliance, bugs, performance issues, and security vulnerabilities.

Community
Advanced