Can it automatically fix the code?

The skill provides specific code recommendations and fixed patterns for every vulnerability it identifies, allowing you to quickly apply secure mitigations.

What kind of vulnerabilities can it find?

It identifies 11 major risks including rekeying attacks, missing group size checks, unchecked transaction fees, and improper asset opt-in validation.

Does this skill support the Beaker framework?

Yes, the scanner recognizes Beaker-specific indicators and patterns alongside standard PyTeal and TEAL files.

Do I need to install Tealer to use this skill?

While the skill can perform manual pattern analysis, it is highly recommended to have Tealer installed (pip3 install tealer) for more robust, automated detection results.

Algorand Vulnerability Scanner

Name: Algorand Vulnerability Scanner
Author: trailofbits

bytrailofbits

•

2,992

•

Security & Testing

Audits Algorand smart contracts written in TEAL or PyTeal to detect and remediate 11 critical security vulnerabilities.

The Algorand Vulnerability Scanner is a specialized security tool for developers and auditors working within the Algorand ecosystem. It systematically analyzes TEAL assembly and PyTeal code for platform-specific risks documented in Trail of Bits' security research, including rekeying attacks, unchecked transaction fees, and atomic group transaction manipulation. By integrating with the Tealer static analyzer and applying domain-specific logic, the skill identifies vulnerabilities, explains potential attack scenarios, and provides actionable code fixes to ensure robust smart contract security before deployment.

Key Features

01Provides detailed reports with severity levels and remediation code

02Supports TEAL, PyTeal, and Beaker framework project structures

032,992 GitHub stars

04Scans for 11 critical Algorand-specific vulnerability patterns

05Integrates with the Tealer static analyzer for automated detection

06Includes comprehensive checklists for transaction field validation

Use Cases

01Educating developers on platform-specific security patterns and best practices

02Validating fixes for reported vulnerabilities in TEAL or PyTeal contracts

03Conducting pre-audit security assessments of Algorand stateful applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trailofbits/skills algorand-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill