canister-security
OfficialSecure your IC canisters against common threats.
Authordfinity
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill addresses critical security vulnerabilities inherent in Internet Computer (IC) canister development, preventing common exploits and ensuring robust application security.
Core Features & Use Cases
- Access Control: Implement secure authentication and authorization for canister methods.
- Reentrancy Prevention: Protect against TOCTOU vulnerabilities using the CallerGuard pattern.
- Async Safety: Ensure state integrity during inter-canister calls with patterns like saga.
- Upgrade Safety: Prevent non-upgradeable canisters due to
pre_upgradetraps. - Cycle Management: Protect against cycle drains and ensure canister longevity.
- Use Case: When developing a decentralized finance (DeFi) application on the IC, use these patterns to secure token transfers, prevent reentrancy attacks, and ensure safe upgrades during maintenance.
Quick Start
Secure your Motoko canister by implementing the requireOwner guard for sensitive admin actions.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: canister-security Download link: https://github.com/dfinity/icskills/archive/main.zip#canister-security Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.