canister-security

Official

Secure your IC canisters against common threats.

Authordfinity
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill addresses critical security vulnerabilities inherent in Internet Computer (IC) canister development, preventing common exploits and ensuring robust application security.

Core Features & Use Cases

  • Access Control: Implement secure authentication and authorization for canister methods.
  • Reentrancy Prevention: Protect against TOCTOU vulnerabilities using the CallerGuard pattern.
  • Async Safety: Ensure state integrity during inter-canister calls with patterns like saga.
  • Upgrade Safety: Prevent non-upgradeable canisters due to pre_upgrade traps.
  • Cycle Management: Protect against cycle drains and ensure canister longevity.
  • Use Case: When developing a decentralized finance (DeFi) application on the IC, use these patterns to secure token transfers, prevent reentrancy attacks, and ensure safe upgrades during maintenance.

Quick Start

Secure your Motoko canister by implementing the requireOwner guard for sensitive admin actions.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: canister-security
Download link: https://github.com/dfinity/icskills/archive/main.zip#canister-security

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.