Back to Skills

ton-vulnerability-scanner

trailofbits
Updated 23 days ago
25 views
5,389
479
5,389
View on GitHub
Designgeneral

About

This skill scans TON smart contracts written in FunC for three critical security vulnerabilities: integer-as-boolean misuse, fake Jetton contracts, and unsafe TON forwarding without gas checks. Use it when auditing or performing pre-launch security assessments of TON dApps and token implementations. It automatically detects FunC files (`.fc`, `.func`) for analysis.

Quick Install

Claude Code

Recommended
Primary
npx skills add trailofbits/skills -a claude-code
Plugin CommandAlternative
/plugin add https://github.com/trailofbits/skills
Git CloneAlternative
git clone https://github.com/trailofbits/skills.git ~/.claude/skills/ton-vulnerability-scanner

Copy and paste this command in Claude Code to install this skill

GitHub Repository

trailofbits/skills
Path: plugins/building-secure-contracts/skills/ton-vulnerability-scanner
0
agent-skills

Related Skills

executing-plans

Design

Use the executing-plans skill when you have a complete implementation plan to execute in controlled batches with review checkpoints. It loads and critically reviews the plan, then executes tasks in small batches (default 3 tasks) while reporting progress between each batch for architect review. This ensures systematic implementation with built-in quality control checkpoints.

View skill

requesting-code-review

Design

This skill dispatches a code-reviewer subagent to analyze code changes against requirements before proceeding. It should be used after completing tasks, implementing major features, or before merging to main. The review helps catch issues early by comparing the current implementation with the original plan.

View skill

connect-mcp-server

Design

This skill provides a comprehensive guide for developers to connect MCP servers to Claude Code using HTTP, stdio, or SSE transports. It covers installation, configuration, authentication, and security for integrating external services like GitHub, Notion, and custom APIs. Use it when setting up MCP integrations, configuring external tools, or working with Claude's Model Context Protocol.

View skill

web-cli-teleport

Design

This skill helps developers choose between Claude Code Web and CLI interfaces based on task analysis, then enables seamless session teleportation between these environments. It optimizes workflow by managing session state and context when switching between web, CLI, or mobile. Use it for complex projects requiring different tools at various stages.

View skill