cosmos-vulnerability-scanner

name	cosmos-vulnerability-scanner
description	Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts.

Cosmos Vulnerability Scanner

1. Purpose

Systematically scan Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss. This skill encodes 9 critical vulnerability patterns unique to Cosmos-based chains.

2. When to Use This Skill

• Auditing Cosmos SDK modules (custom x/ modules)
• Reviewing CosmWasm smart contracts (Rust)
• Pre-launch security assessment of Cosmos chains
• Investigating chain halt incidents
• Validating consensus-critical code changes
• Reviewing ABCI method implementations

3. Platform Detection

File Extensions & Indicators

• Go files: .go, .proto
• CosmWasm: .rs (Rust with cosmwasm imports)

Language/Framework Markers

// Cosmos SDK indicators
import (
    "github.com/cosmos/cosmos-sdk/types"
    sdk "github.com/cosmos/cosmos-sdk/types"
    "github.com/cosmos/cosmos-sdk/x/..."
)

// Common patterns
keeper.Keeper
sdk.Msg, GetSigners()
BeginBlocker, EndBlocker
CheckTx, DeliverTx
protobuf service definitions

// CosmWasm indicators
use cosmwasm_std::*;

  (deps: DepsMut, env: Env, info: MessageInfo, msg: ExecuteMsg)