Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.
Install
npx skills add trailofbits/skills --skill cairo-vulnerability-scannernpx skills add trailofbits/skills --skill cairo-vulnerability-scanner -a claude-code -gnpx skills add trailofbits/skills --skill cairo-vulnerability-scanner -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/building-secure-contracts/skills/cairo-vulnerability-scannergh skill install trailofbits/skills cairo-vulnerability-scannergit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/cairo-vulnerability-scanner ~/.claude/skills/cairo-vulnerability-scanner # Claude Code
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/cairo-vulnerability-scanner ~/.agents/skills/cairo-vulnerability-scanner # Codex, Cursor, Gemini CLI, Copilot, OpenCode