substrate-vulnerability-scanner

Scan Substrate/FRAME pallets for 7 critical vulnerability patterns in Rust code.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill substrate-vulnerability-scanner-ramprasad4121
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: substrate-vulnerability-scanner
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/building-secure-contracts/skills/substrate-vulnerability-scanner
Command: npx skills add https://github.com/Ramprasad4121/srp --skill substrate-vulnerability-scanner-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill systematically scans Substrate runtime modules (pallets) for platform-specific security vulnerabilities that can cause node crashes, DoS attacks, or unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 7 critical vulnerability patterns unique to Substrate/FRAME (Arithmetic Overflow, Panics, Weights/Fees, etc.).
  • Code Analysis: Analyzes Rust code for common security pitfalls in pallets and runtimes.
  • Use Case: When auditing a new custom Substrate pallet, use this Skill to quickly identify and remediate critical security flaws before deployment.

Quick Start

Use the substrate-vulnerability-scanner skill to audit the pallet code in the current directory.

Frequently Asked Questions about substrate-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Substrate pallet for security vulnerabilities?

To scan a Substrate pallet for security vulnerabilities, use this Skill to analyze your Rust code for 7 critical vulnerability patterns. It detects arithmetic overflows, panic DoS, incorrect weights, and bad origin checks, then provides specific remediation guidance.

What vulnerabilities can occur in FRAME pallets?

FRAME pallets can experience arithmetic overflow, panic-based DoS attacks, incorrect weight calculations, and bad origin checks. These Substrate-specific vulnerabilities can cause node crashes or unauthorized access if not properly audited before deployment.

Do I need to know Rust to audit Substrate runtimes?

Yes, auditing Substrate runtimes requires understanding of Substrate/FRAME architecture and Rust programming. The scanner analyzes Rust code for specific vulnerability patterns, so familiarity with pallet structure is necessary to interpret and apply the remediation guidance.

Can I check Substrate pallets for incorrect weights and bad origin checks?

Yes, you can check Substrate pallets for incorrect weights and bad origin checks. The scanner specifically targets these vulnerability patterns along with arithmetic overflow and panic DoS, analyzing your Rust code to identify security flaws.

What's the best way to audit Polkadot pallets before deployment?

The best way to audit Polkadot pallets before deployment is systematic vulnerability scanning of Rust code. This Skill identifies 7 critical vulnerability patterns unique to Substrate/FRAME, helping you quickly find and remediate security flaws.

Why does my Substrate node crash from panic DoS vulnerabilities?

Substrate node crashes from panic DoS vulnerabilities occur when pallet code contains patterns that cause runtime panics. This scanner detects these problematic code patterns in your Rust pallets and provides remediation guidance to prevent them.