substrate-vulnerability-scanner

仓库创建 2026年1月15日最近提交 7 天前SkillHot 收录 20 天前

▸ 精选理由

针对 FRAME 运行时特有的溢出、权重与 origin 检查等问题提供自动化检测

▸ 风险提示

需要构建/分析运行时代码并运行外部工具，可能接触敏感或不可信源码

这个 Skill 做什么

扫描 Substrate/Polkadot pallets 中 7 类关键安全漏洞

专门扫描 Substrate/Polkadot 的 runtimes（pallets）里那类平台相关的安全漏洞，比如算术溢出、panic 导致的 DoS、错误的权重/权限检查等。做链上代码审计或 review FRAME pallet 时用得上，能把常见的七类致命模式自动识别出来。优势是基于 Substrate 特性定制，不会像通用扫描器那样漏掉链上特有的风险。

▸ 展开 SKILL.md 英文原文

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

垂直行业SubstratePallet漏洞扫描运行时安全通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/substrate-vulnerability-scanner/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/substrate-vulnerability-scanner/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Substrate Vulnerability Scanner

## 1. Purpose

Systematically scan Substrate runtime modules (pallets) for platform-specific security vulnerabilities that can cause node crashes, DoS attacks, or unauthorized access. This skill encodes 7 critical vulnerability patterns unique to Substrate/FRAME-based chains.

## 2. When to Use This Skill

- Auditing custom Substrate pallets
- Reviewing FRAME runtime code
- Pre-launch security assessment of Substrate chains (Polkadot parachains, standalone chains)
- Validating dispatchable extrinsic functions
- Reviewing weight calculation functions
- Assessing unsigned transaction validation logic

## 3. Platform Detection

### File Extensions & Indicators

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有