substrate-vulnerability-scanner
Find security flaws in your Substrate pallets.
What it does
Identifies security flaws in Substrate pallets and returns cited findings, severity ratings, and suggested fixes.
When to use it
Use when auditing Substrate pallets, reviewing FRAME runtimes, assessing chains before launch, or checking dispatchables, weights, and unsigned transactions.
How to use it
Give it a Substrate codebase; it returns a seven-pattern coverage table, cited security findings, severity ratings, and suggested fixes.
What you provide
- An existing project
Uses
What you need · 3
The scanning workflow uses rg to search pallet code for panic-prone patterns and unsafe arithmetic.
Requires Cargo to run the project's benchmarking tests with the runtime-benchmarks feature.
Enables the recommended runtime-upgrade test using the built runtime and a live Polkadot RPC endpoint.
Access · 1
This skill
wss://rpc.polkadot.io
Reads live Polkadot chain state