cosmos-vulnerability-scanner

Scan Cosmos SDK blockchains and CosmWasm contracts for consensus-critical vulnerabilities.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill cosmos-vulnerability-scanner-ofelixdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill cosmos-vulnerability-scanner-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically scans Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 9 critical vulnerability patterns unique to Cosmos-based chains, including non-determinism, incorrect signers, ABCI panics, and rounding errors.
  • Code Auditing: Essential for auditing Cosmos SDK modules, reviewing CosmWasm smart contracts, and performing pre-launch security assessments.
  • Use Case: When auditing a new Cosmos chain, use this Skill to proactively identify and fix potential consensus-critical bugs before they can cause a chain halt.

Quick Start

Scan the current project for Cosmos SDK vulnerabilities.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Cosmos SDK modules for consensus-critical vulnerabilities?▼

To scan Cosmos SDK modules for consensus-critical vulnerabilities, use this tool to automatically detect 9 critical patterns including non-determinism, incorrect signers, and ABCI panics. It systematically audits custom modules to prevent chain halts and consensus failures.

What causes non-determinism in Cosmos blockchains and how is it detected?▼

Non-determinism in Cosmos blockchains causes consensus failures when nodes process the same transaction differently. This scanner detects non-deterministic code patterns alongside arithmetic errors and rounding issues by analyzing Cosmos SDK modules and CosmWasm smart contracts to prevent chain halts.

Can I audit CosmWasm smart contracts for security flaws before mainnet launch?▼

Yes, you can audit CosmWasm smart contracts for security flaws before mainnet launch. This scanner performs pre-launch security assessments to identify platform-specific issues like authorization flaws and ABCI panics, ensuring custom smart contracts do not cause fund loss or chain halts.

Does this vulnerability scanner detect ABCI panics and authorization flaws?▼

Yes, this vulnerability scanner detects ABCI panics and authorization flaws. It scans for 9 specific consensus-critical vulnerability patterns unique to Cosmos-based chains, systematically identifying these issues to prevent unexpected chain halts and secure custom modules.

What's the best way to prevent a chain halt during a Cosmos SDK upgrade?▼

The best way to prevent a chain halt during a Cosmos SDK upgrade is to proactively scan custom modules for consensus-critical bugs. This tool identifies platform-specific vulnerabilities like non-determinism and arithmetic errors before deployment, mitigating risks of chain halts and consensus failures.