Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.
Install
npx skills add trailofbits/skills --skill cosmos-vulnerability-scannernpx skills add trailofbits/skills --skill cosmos-vulnerability-scanner -a claude-code -gnpx skills add trailofbits/skills --skill cosmos-vulnerability-scanner -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/building-secure-contracts/skills/cosmos-vulnerability-scannergh skill install trailofbits/skills cosmos-vulnerability-scannergit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner ~/.claude/skills/cosmos-vulnerability-scanner # Claude Code
cp -R /tmp/trailofbits__skills/plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner ~/.agents/skills/cosmos-vulnerability-scanner # Codex, Cursor, Gemini CLI, Copilot, OpenCode