Cairo StarkNet Vulnerability Scanner

by trailofbits

Cairo StarkNet Vulnerability Scanner is a Quality skill for Claude Code, published by trailofbits in skills.

6.6K stars567 forkson trailofbits/skillsAdded 2026/08/15Repository updated 2026/08/14

View source on GitHub Download repo ZIP

agent-skills

Install in seconds

Install Cairo StarkNet Vulnerability Scanner

Copy Cairo StarkNet Vulnerability Scanner into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/cairo-vulnerability-scanner ~/.claude/skills/cairo-vulnerability-scanner

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/trailofbits/skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md in trailofbits/skills
Installs to: ~/.claude/skills/cairo-vulnerability-scanner
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What Cairo StarkNet Vulnerability Scanner does

Cairo StarkNet Vulnerability Scanner scans Cairo smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use it when auditing StarkNet projects.

Cairo StarkNet Vulnerability Scanner is cataloged under Quality on DirSkills. Cairo StarkNet Vulnerability Scanner comes from a repository tagged agent-skills.

Documentation

README

Excerpt

Cairo/StarkNet Vulnerability Scanner

1. Purpose

Systematically scan Cairo smart contracts on StarkNet for platform-specific security vulnerabilities related to arithmetic, cross-layer messaging, and cryptographic operations. This skill encodes 6 critical vulnerability patterns unique to Cairo/StarkNet ecosystem.

2. When to Use This Skill

Auditing StarkNet smart contracts (Cairo)
Reviewing L1-L2 bridge implementations
Pre-launch security assessment of StarkNet applications
Validating cross-layer message handling
Reviewing signature verification logic
Assessing L1 handler functions

3. Platform Detection

File Extensions & Indicators

Cairo files: .cairo

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Cairo StarkNet Vulnerability Scanner

What else does trailofbits publish alongside Cairo StarkNet Vulnerability Scanner?
Cairo StarkNet Vulnerability Scanner is one of 25 skills that DirSkills catalogs from trailofbits/skills, the repository it ships in. Its siblings there include Agentic Actions Auditor, Algorand Vulnerability Scanner and Audit Context Building. Each one is a separate skill with its own page in this directory, installs the same way Cairo StarkNet Vulnerability Scanner does, and is maintained by trailofbits in that same repository. The rest of the collection is listed on the trailofbits/skills page.
How does Cairo StarkNet Vulnerability Scanner compare to other Quality skills?
Cairo StarkNet Vulnerability Scanner ranks #248 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Cairo StarkNet Vulnerability Scanner against them. Open each page to compare what they document and how they install.