Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →trailofbits/algorand-vulnerability-scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.
Passed 17 of 22 test cases with the skill, and 15 of 22 without it.
3 fixed14 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
What static analysis command-line utility should we execute on our Algorand TEAL smart contract source file to automatically detect all vulnerability patterns in CI?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies executing tealer with the --detect all flag. | Missed | Passed |
The instructions your model reads when the skill loads.
Systematically scan Algorand smart contracts (TEAL and PyTeal) for platform-specific security vulnerabilities documented in Trail of Bits' "Not So Smart Contracts" database. This skill encodes 11 critical vulnerability patterns unique to Algorand's transaction model.
.teal.py with PyTeal imports# PyTeal indicators
from pyteal import *
from algosdk import *
# Common patterns
Txn, Gtxn, Global, InnerTxnBuilder
OnComplete, ApplicationCall, TxnType
@router.method, @Subroutine
approval_program.py / clear_program.pycontract.teal / signature.tealpip3 install tealertest cases passed, vs 15 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.