Is the Algorand Vulnerability Scanner skill free?

Yes. The skill itself is free from trailofbits/skills. SkillProof publishes the install command and an independent test verdict at no cost.

What is the Algorand Vulnerability Scanner SkillProof Score?

8.0/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 6/10, docs & honesty 4/5.

How do I install Algorand Vulnerability Scanner?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use Algorand Vulnerability Scanner with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 vulnerabilities like rekeying and fee attacks.

by trailofbits · trailofbits/skills

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.0/10
Tested: Jul 12, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · 5599063

Tested by auditing a deliberately-vulnerable PyTeal escrow contract with 4 planted flaws (unrestricted UpdateApplication/DeleteApplication, missing RekeyTo check, missing CloseRemainderTo check, and an inner-transaction fee not pinned to zero). The skill arm caught all 4 including the Algorand-specific inner-txn fee drain, while the no-skill base arm caught 3/4 and missed the fee issue. Both reports were false-positive-free and well-remediated; the base arm was actually sharper on a min-balance functional bug, so the skill's lift was modest and concentrated in the platform-specific footgun where its 11-pattern checklist adds value.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 6/10
Docs & honesty 4/5

What Algorand Vulnerability Scanner does

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).

How to install Algorand Vulnerability Scanner

git clone https://github.com/trailofbits/skills
cd skills
mkdir -p ~/.claude/skills
cp -r plugins/building-secure-contracts/skills/algorand-vulnerability-scanner ~/.claude/skills/algorand-vulnerability-scanner

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Algorand Vulnerability Scanner

/algorand-vulnerability-scanner Scans Algorand smart contracts for 11 vulnerabilities like rekeying and fee attacks.

It also activates on plain-language prompts like these:

Scan this PyTeal contract for vulnerabilities
Audit our Algorand smart contract for rekeying risks
Check this TEAL code for missing field validation

Frequently asked questions

Is the Algorand Vulnerability Scanner skill free?: Yes. The skill itself is free from trailofbits/skills. SkillProof publishes the install command and an independent test verdict at no cost.
Does Algorand Vulnerability Scanner work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 12, 2026. Verdict: Tested · Works. Tested by auditing a deliberately-vulnerable PyTeal escrow contract with 4 planted flaws (unrestricted UpdateApplication/DeleteApplication, missing RekeyTo check, missing CloseRemainderTo check, and an inner-transaction fee not pinned to zero). The skill arm caught all 4 including the Algorand-specific inner-txn fee drain, while the no-skill base arm caught 3/4 and missed the fee issue. Both reports were false-positive-free and well-remediated; the base arm was actually sharper on a min-balance functional bug, so the skill's lift was modest and concentrated in the platform-specific footgun where its 11-pattern checklist adds value.
What is the Algorand Vulnerability Scanner SkillProof Score?: 8.0/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 6/10, docs & honesty 4/5.
How do I install Algorand Vulnerability Scanner?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Algorand Vulnerability Scanner with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.