Cairo Vulnerability Scanner skill: what it does and how to install it

What it does. Searches Cairo contracts, identifies the Cairo version and L1-L2 components, then checks six vulnerability patterns covering felt252 arithmetic, address conversion, message handling, bridge coupling, signature replay and L1 handler access control. It reports every pattern in a coverage table with verdicts, locations, severity, fixes and testing recommendations, and can run Caracal detectors.

When to use it. For StarkNet contract audits, bridge reviews, pre-launch assessments and reviews of L1 handlers or signature verification logic. It applies to Cairo projects, including contracts with cross-layer messaging.