Ton Vulnerability Scanner

🌐Community
by trailofbits · vlatest · Repository

This tool analyzes TON blockchain transactions to identify potential vulnerabilities and weaknesses in smart contracts or protocols.

Install on your platform

We auto-selected Claude Code based on this skill’s supported platforms.

1

Run in terminal (recommended)

terminal
claude mcp add ton-vulnerability-scanner npx -- -y @trustedskills/ton-vulnerability-scanner
2

Or manually add to ~/.claude/settings.json

~/.claude/settings.json
{
  "mcpServers": {
    "ton-vulnerability-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@trustedskills/ton-vulnerability-scanner"
      ]
    }
  }
}

Requires Claude Code (claude CLI). Run claude --version to verify your install.

About This Skill

What it does

The ton-vulnerability-scanner skill allows you to scan The Open Network (TON) smart contracts for vulnerabilities. It identifies potential security flaws in your TON code, helping developers build more secure and reliable decentralized applications. This tool provides a crucial layer of defense against exploits and malicious attacks within the TON ecosystem.

When to use it

  • Smart contract development: Integrate into your development workflow to proactively identify vulnerabilities before deployment.
  • Security audits: Use as part of a broader security audit process for existing TON smart contracts.
  • Code review: Incorporate scanning into code review processes to catch potential issues early on.
  • Automated testing: Automate vulnerability scans as part of continuous integration and delivery pipelines.

Key capabilities

  • TON Smart Contract Scanning
  • Vulnerability Identification
  • Security Flaw Detection

Example prompts

  • "Scan this TON smart contract for vulnerabilities: [contract address]"
  • "Analyze the code at [link to contract source] for potential security flaws."
  • "Run a vulnerability scan on my new TON deployment."

Tips & gotchas

The skill requires familiarity with The Open Network (TON) and its smart contract development environment. Results should be interpreted by experienced security professionals, as automated scans are not a substitute for thorough manual review.

Tags

🛡️

TrustedSkills Verification

Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.

Security Audits

Gen Agent Trust HubPass
SocketPass
SnykPass

Details

Version
vlatest
License
Author
trailofbits
Installs
0

🌐 Community

Passed automated security scans.