# Substrate Vulnerability Scanner > Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets. (project, gitignored) Use when this capability is needed. - Skill: `tomevault-io/substrate-vulnerability-scanner` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/substrate-vulnerability-scanner` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/substrate-vulnerability-scanner/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/substrate-vulnerability-scanner --- # Substrate Vulnerability Scanner Skill **Trit**: -1 (MINUS) **Category**: building-secure-contracts **Author**: Trail of Bits **Source**: trailofbits/skills **License**: AGPL-3.0 ## Description Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets. (project, gitignored) ## When to Use This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples. See: https://github.com/trailofbits/skills ## Related Skills - audit-context-building - codeql - semgrep - variant-analysis --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/plurigrid) — claim your Tome and manage your conversions.