TON Vulnerability Scanner

by trailofbits

TON Vulnerability Scanner is a Quality skill for Claude Code, published by trailofbits in skills.

6.6K stars567 forkson trailofbits/skillsAdded 2026/08/15Repository updated 2026/08/14

View source on GitHub Download repo ZIP

agent-skills

Install in seconds

Install TON Vulnerability Scanner

Copy TON Vulnerability Scanner into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/ton-vulnerability-scanner ~/.claude/skills/ton-vulnerability-scanner

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/trailofbits/skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: plugins/building-secure-contracts/skills/ton-vulnerability-scanner/SKILL.md in trailofbits/skills
Installs to: ~/.claude/skills/ton-vulnerability-scanner
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What TON Vulnerability Scanner does

TON Vulnerability Scanner scans TON smart contracts written in FunC for critical vulnerabilities such as integer-as-boolean misuse, fake Jetton contracts, and improper gas handling. Use it when auditing or reviewing TON dApps for security issues before launch.

TON Vulnerability Scanner is cataloged under Quality on DirSkills. TON Vulnerability Scanner comes from a repository tagged agent-skills.

Documentation

README

Excerpt

TON Vulnerability Scanner

1. Purpose

Systematically scan TON blockchain smart contracts written in FunC for platform-specific security vulnerabilities related to boolean logic, Jetton token handling, and gas management. This skill encodes 3 critical vulnerability patterns unique to TON's architecture.

2. When to Use This Skill

Auditing TON smart contracts (FunC language)
Reviewing Jetton token implementations
Validating token transfer notification handlers
Pre-launch security assessment of TON dApps
Reviewing gas forwarding logic
Assessing boolean condition handling

3. Platform Detection

File Extensions & Indicators

FunC files: .fc, .func

This is the opening of the README. Read the full README on GitHub.

Frequently asked about TON Vulnerability Scanner

What else does trailofbits publish alongside TON Vulnerability Scanner?
TON Vulnerability Scanner is one of 25 skills that DirSkills catalogs from trailofbits/skills, the repository it ships in. Its siblings there include Agentic Actions Auditor, Algorand Vulnerability Scanner and Audit Context Building. Each one is a separate skill with its own page in this directory, installs the same way TON Vulnerability Scanner does, and is maintained by trailofbits in that same repository. The rest of the collection is listed on the trailofbits/skills page.
How does TON Vulnerability Scanner compare to other Quality skills?
TON Vulnerability Scanner ranks #263 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of TON Vulnerability Scanner against them. Open each page to compare what they document and how they install.