SkillCheatSheet
cosmos-vulnerability-scanner
An AI agent skill from trailofbits/skills, scored 84 out of 100 by code and Verified.
Code score by group
It loses the most points in Scripts (6), the group that checks whether scripts are called from the steps and fail with a clear error.
What the author says it does
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.
This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.
- Repository
- trailofbits/skills
- Folder
- plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner
- License
- CC-BY-SA-4.0
- GitHub stars
- 8,147
- SKILL.md lines
- 189
- Other files
- 10
Add cosmos-vulnerability-scanner to your agent
npx skills add trailofbits/skills --skill cosmos-vulnerability-scannerThe command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.
Labelled for
More skills from trailofbits/skills
-
cvss-scoring
Produces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector,…
Verified85A -
codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database…
Verified83B -
graph-evolution
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexi…
Verified82B -
post-patch-validation
Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…
Verified82B -
semgrep
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-sc…
Verified82B -
yara-rule-authoring
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string select…
Verified81B -
crypto-protocol-diagram
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagra…
Verified80B -
sarif-parsing
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "dedupli…
Verified80B
All skills in trailofbits/skills
Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.