Substrate Vulnerability Scanner

by trailofbits

Substrate Vulnerability Scanner is a Quality skill for Claude Code, published by trailofbits in skills.

6.6K stars567 forkson trailofbits/skillsAdded 2026/08/15Repository updated 2026/08/14

View source on GitHub Download repo ZIP

agent-skills

Install in seconds

Install Substrate Vulnerability Scanner

Copy Substrate Vulnerability Scanner into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/substrate-vulnerability-scanner ~/.claude/skills/substrate-vulnerability-scanner

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/trailofbits/skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: plugins/building-secure-contracts/skills/substrate-vulnerability-scanner/SKILL.md in trailofbits/skills
Installs to: ~/.claude/skills/substrate-vulnerability-scanner
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What Substrate Vulnerability Scanner does

Substrate Vulnerability Scanner scans Substrate/Polkadot pallets for seven critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

Substrate Vulnerability Scanner is cataloged under Quality on DirSkills. Substrate Vulnerability Scanner comes from a repository tagged agent-skills.

Documentation

README

Excerpt

Substrate Vulnerability Scanner

1. Purpose

Systematically scan Substrate runtime modules (pallets) for platform-specific security vulnerabilities that can cause node crashes, DoS attacks, or unauthorized access. This skill encodes 7 critical vulnerability patterns unique to Substrate/FRAME-based chains.

2. When to Use This Skill

Auditing custom Substrate pallets
Reviewing FRAME runtime code
Pre-launch security assessment of Substrate chains (Polkadot parachains, standalone chains)
Validating dispatchable extrinsic functions
Reviewing weight calculation functions
Assessing unsigned transaction validation logic

3. Platform Detection

File Extensions & Indicators

Rust files: .rs

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Substrate Vulnerability Scanner

What else does trailofbits publish alongside Substrate Vulnerability Scanner?
Substrate Vulnerability Scanner is one of 25 skills that DirSkills catalogs from trailofbits/skills, the repository it ships in. Its siblings there include Agentic Actions Auditor, Algorand Vulnerability Scanner and Audit Context Building. Each one is a separate skill with its own page in this directory, installs the same way Substrate Vulnerability Scanner does, and is maintained by trailofbits in that same repository. The rest of the collection is listed on the trailofbits/skills page.
How does Substrate Vulnerability Scanner compare to other Quality skills?
Substrate Vulnerability Scanner ranks #261 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Substrate Vulnerability Scanner against them. Open each page to compare what they document and how they install.