TON Vulnerability Scanner skill: what it does and how to install it

What it does. Scans FunC contracts for three TON-specific issues: integer-as-boolean misuse, unvalidated Jetton transfer notifications, and forward TON amounts that can exhaust gas. It searches contract files, checks message parsing and sender or gas validation, then reports coverage, findings with locations and severity, fixes and testing suggestions.

When to use it. Use it for TON or Jetton audits, especially before launch and when reviewing transfer handlers or forwarding logic. It targets FunC contracts and relies mainly on manual review rather than broad automated analysis.