Substrate Vulnerability Scanner
This Substrate Vulnerability Scanner analyzes your Polkadot/Substrate blockchain for potential security weaknesses, safeguarding your chain's integrity.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add substrate-vulnerability-scanner npx -- -y @trustedskills/substrate-vulnerability-scanner
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"substrate-vulnerability-scanner": {
"command": "npx",
"args": [
"-y",
"@trustedskills/substrate-vulnerability-scanner"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The substrate-vulnerability-scanner skill allows AI agents to identify potential security vulnerabilities in Substrate blockchain networks. It analyzes the network's configuration and code for common issues, providing detailed reports that can be used to improve overall security posture. This skill is designed to assist developers and operators in proactively addressing risks within their Substrate deployments.
When to use it
- Pre-deployment Security Audits: Before launching a new Substrate chain or runtime upgrade, scan for vulnerabilities.
- Regular Security Checks: Schedule periodic scans of existing Substrate networks to detect newly introduced issues.
- Incident Response: Following a security incident, quickly assess the network's configuration and code for related vulnerabilities.
- Runtime Upgrade Validation: Ensure that new runtime versions do not introduce regressions in security posture.
Key capabilities
- Vulnerability scanning of Substrate networks.
- Detailed vulnerability reports.
- Identification of common security issues.
Example prompts
- "Scan this Substrate network for vulnerabilities: [network URL]"
- "Analyze the runtime code at this repository for potential security flaws."
- “Generate a report detailing all identified vulnerabilities in my Substrate chain.”
Tips & gotchas
This skill requires access to the Substrate network or its codebase being analyzed. The accuracy of the scan depends on the completeness and correctness of the provided information; ensure accurate URLs and code repositories are supplied for best results.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.