cosmos-vulnerability-scanner

The cosmos-vulnerability-scanner skill is designed to identify consensus-critical vulnerabilities within Cosmos SDK blockchain modules and CosmWasm smart contracts. It addresses a major problem in blockchain security: bugs that can cause chain halts, state divergences, or loss of funds. By targeting the core execution paths and inter-module interactions, this skill ensures that any issues affecting the determinism or safety of the blockchain are detected before they can disrupt operations. Its focus on consensus-critical components, such as BeginBlock, EndBlock, and message server handlers, differentiates it from general-purpose code analyzers or EVM-only scanners.

The skill provides a structured, two-phase scanning workflow. The first phase, Discovery, performs a synchronous analysis of the target codebase, generating a technical inventory and threat model in a CLAUDE.md file while capturing key metadata like platform, SDK version, and custom modules. The second phase executes parallel scanning agents specialized in various vulnerability categories, covering patterns in Cosmos SDK modules, IBC integrations, EVM interactions, and CosmWasm contracts. The skill produces findings as individual markdown files, which can be saved in a default or user-specified output directory. Its principles emphasize verification of consensus paths, assessment of cross-module interactions, and version awareness to avoid false positives.

This skill is ideal for blockchain developers, security auditors, and teams preparing new Cosmos-based chains for launch. It is particularly suited for auditing custom x/ modules, reviewing IBC-enabled integrations, and analyzing CosmWasm smart contracts. Users can leverage it during pre-launch security assessments, chain halt investigations, or ongoing vulnerability management. Its specialized focus ensures that high-severity issues affecting the entire validator set are prioritized, helping teams mitigate risks before they become critical incidents.