cosmos-vulnerability-scanner

仓库创建 2026年1月15日最近提交 7 天前SkillHot 收录 20 天前

▸ 精选理由

覆盖多类共识与跨链问题，适合链级安全评估。

▸ 风险提示

扫描需接触链模块源码或配置，可能暴露敏感数据且有误报。

这个 Skill 做什么

扫描 Cosmos SDK 与 CosmWasm 合约中会导致链停摆或资金损失的漏洞模式。

专门扫 Cosmos SDK 模块和 CosmWasm 合约会导致共识中断、链停摆或资金损失的漏洞模式，覆盖 25 个核心、16 个 IBC、10 个 EVM 和 3 个 CosmWasm 模式。适合在审计自定义 x/ 模块、复查 IBC 集成或上线前做安全评估时使用。特点是并行多路扫描、按类别输出详细发现，并已针对 SDK v0.53.x 做过更新。

▸ 展开 SKILL.md 英文原文

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.

垂直行业Cosmos区块链安全IBC通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Cosmos Vulnerability Scanner

## Purpose

Scan Cosmos SDK modules and CosmWasm contracts for vulnerabilities that cause chain halts, consensus failures, or fund loss. Spawns parallel scanning agents — each specializing in a vulnerability category — that return findings to the main skill, which then writes them as individual markdown files to an output directory.

**Output directory**: defaults to `.bughunt_cosmos/`. If the user specifies a different directory in their prompt, use that instead.

## When to Use

- Auditing Cosmos SDK modules (custom `x/` modules)
- Reviewing CosmWasm smart contracts
- Pre-launch security assessment of Cosmos chains
- Investigating chain halt incidents

## Wh

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有