[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-trail-of-bits-substrate-vulnerability-scanner":3,"mdc-nsss8a-key":38,"related-org-trail-of-bits-substrate-vulnerability-scanner":2500,"related-repo-trail-of-bits-substrate-vulnerability-scanner":2651},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":26,"repoUrl":27,"updatedAt":28,"license":29,"forks":30,"topics":31,"repo":33,"sourceUrl":36,"mdContent":37},"substrate-vulnerability-scanner","scan Substrate runtimes for vulnerabilities","Scans Substrate\u002FPolkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"trail-of-bits","Trail of Bits","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Ftrail-of-bits.png","trailofbits",[13,17,20,23],{"name":14,"slug":15,"type":16},"Security","security","tag",{"name":18,"slug":19,"type":16},"Audit","audit",{"name":21,"slug":22,"type":16},"Smart Contracts","smart-contracts",{"name":24,"slug":25,"type":16},"Code Analysis","code-analysis",6139,"https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills","2026-07-18T05:47:47.17862",null,541,[32],"agent-skills",{"repoUrl":27,"stars":26,"forks":30,"topics":34,"description":35},[32],"Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills\u002Ftree\u002FHEAD\u002Fplugins\u002Fbuilding-secure-contracts\u002Fskills\u002Fsubstrate-vulnerability-scanner","---\nname: substrate-vulnerability-scanner\ndescription: Scans Substrate\u002FPolkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.\n---\n\n# Substrate Vulnerability Scanner\n\n## 1. Purpose\n\nSystematically scan Substrate runtime modules (pallets) for platform-specific security vulnerabilities that can cause node crashes, DoS attacks, or unauthorized access. This skill encodes 7 critical vulnerability patterns unique to Substrate\u002FFRAME-based chains.\n\n## 2. When to Use This Skill\n\n- Auditing custom Substrate pallets\n- Reviewing FRAME runtime code\n- Pre-launch security assessment of Substrate chains (Polkadot parachains, standalone chains)\n- Validating dispatchable extrinsic functions\n- Reviewing weight calculation functions\n- Assessing unsigned transaction validation logic\n\n## 3. Platform Detection\n\n### File Extensions & Indicators\n- **Rust files**: `.rs`\n\n### Language\u002FFramework Markers\n```rust\n\u002F\u002F Substrate\u002FFRAME indicators\n#[pallet]\npub mod pallet {\n    use frame_support::pallet_prelude::*;\n    use frame_system::pallet_prelude::*;\n\n    #[pallet::config]\n    pub trait Config: frame_system::Config { }\n\n    #[pallet::call]\n    impl\u003CT: Config> Pallet\u003CT> {\n        #[pallet::weight(10_000)]\n        pub fn example_function(origin: OriginFor\u003CT>) -> DispatchResult { }\n    }\n}\n\n\u002F\u002F Common patterns\nDispatchResult, DispatchError\nensure!, ensure_signed, ensure_root\nStorageValue, StorageMap, StorageDoubleMap\n#[pallet::storage]\n#[pallet::call]\n#[pallet::weight]\n#[pallet::validate_unsigned]\n```\n\n### Project Structure\n- `pallets\u002F*\u002Flib.rs` - Pallet implementations\n- `runtime\u002Flib.rs` - Runtime configuration\n- `benchmarking.rs` - Weight benchmarks\n- `Cargo.toml` with `frame-*` dependencies\n\n### Tool Support\n- **cargo-fuzz**: Fuzz testing for Rust\n- **test-fuzz**: Property-based testing framework\n- **benchmarking framework**: Built-in weight calculation\n- **try-runtime**: Runtime migration testing\n\n---\n\n## 4. How This Skill Works\n\nWhen invoked, I will:\n\n1. **Search your codebase** for Substrate pallets\n2. **Analyze each pallet** for the 7 vulnerability patterns\n3. **Report findings** with file references and severity\n4. **Provide fixes** for each identified issue\n5. **Check weight calculations** and origin validation\n\n---\n\n## 5. Vulnerability Patterns (7 Critical Patterns)\n\nI check for 7 critical vulnerability patterns unique to Substrate\u002FFRAME. For detailed detection patterns, code examples, mitigations, and testing strategies, see [VULNERABILITY_PATTERNS.md](resources\u002FVULNERABILITY_PATTERNS.md).\n\n### Pattern Summary:\n\n1. **Arithmetic Overflow** ⚠️ CRITICAL\n   - Direct `+`, `-`, `*`, `\u002F` operators wrap in release mode\n   - Must use `checked_*` or `saturating_*` methods\n   - Affects balance\u002Ftoken calculations, reward\u002Ffee math\n\n2. **Don't Panic** ⚠️ CRITICAL - DoS\n   - Panics cause node to stop processing blocks\n   - No `unwrap()`, `expect()`, array indexing without bounds check\n   - All user input must be validated with `ensure!`\n\n3. **Weights and Fees** ⚠️ CRITICAL - DoS\n   - Incorrect weights allow spam attacks\n   - Fixed weights for variable-cost operations enable DoS\n   - Must use benchmarking framework, bound all input parameters\n\n4. **Verify First, Write Last** ⚠️ HIGH (Pre-v0.9.25)\n   - Storage writes before validation persist on error (pre-v0.9.25)\n   - Pattern: validate → write → emit event\n   - Upgrade to v0.9.25+ or use manual `#[transactional]`\n\n5. **Unsigned Transaction Validation** ⚠️ HIGH\n   - Insufficient validation allows spam\u002Freplay attacks\n   - Prefer signed transactions\n   - If unsigned: validate parameters, replay protection, authenticate source\n\n6. **Bad Randomness** ⚠️ MEDIUM\n   - `pallet_randomness_collective_flip` vulnerable to collusion\n   - Must use BABE randomness (`pallet_babe::RandomnessFromOneEpochAgo`)\n   - Use `random(subject)` not `random_seed()`\n\n7. **Bad Origin** ⚠️ CRITICAL\n   - `ensure_signed` allows any user for privileged operations\n   - Must use `ensure_root` or custom origins (ForceOrigin, AdminOrigin)\n   - Origin types must be properly configured in runtime\n\nFor complete vulnerability patterns with code examples, see [VULNERABILITY_PATTERNS.md](resources\u002FVULNERABILITY_PATTERNS.md).\n\n---\n\n## 6. Scanning Workflow\n\n### Step 1: Platform Identification\n1. Verify Substrate\u002FFRAME framework usage\n2. Check Substrate version (v0.9.25+ has transactional storage)\n3. Locate pallet implementations (`pallets\u002F*\u002Flib.rs`)\n4. Identify runtime configuration (`runtime\u002Flib.rs`)\n\n### Step 2: Dispatchable Analysis\nFor each `#[pallet::call]` function:\n- [ ] Arithmetic: Uses checked\u002Fsaturating operations?\n- [ ] Panics: No unwrap\u002Fexpect\u002Findexing?\n- [ ] Weights: Proportional to cost, bounded inputs?\n- [ ] Origin: Appropriate validation level?\n- [ ] Validation: All checks before storage writes?\n\n### Step 3: Panic Sweep\n```bash\n# Search for panic-prone patterns\nrg \"unwrap\\(\\)\" pallets\u002F\nrg \"expect\\(\" pallets\u002F\nrg \"\\[.*\\]\" pallets\u002F  # Array indexing\nrg \" as u\\d+\" pallets\u002F  # Type casts\nrg \"\\.unwrap_or\" pallets\u002F\n```\n\n### Step 4: Arithmetic Safety Check\n```bash\n# Find direct arithmetic\nrg \" \\+ |\\+=| - |-=| \\* |\\*=| \u002F |\u002F=\" pallets\u002F\n\n# Should find checked\u002Fsaturating alternatives instead\nrg \"checked_add|checked_sub|checked_mul|checked_div\" pallets\u002F\nrg \"saturating_add|saturating_sub|saturating_mul\" pallets\u002F\n```\n\n### Step 5: Weight Analysis\n- [ ] Run benchmarking: `cargo test --features runtime-benchmarks`\n- [ ] Verify weights match computational cost\n- [ ] Check for bounded input parameters\n- [ ] Review weight calculation functions\n\n### Step 6: Origin & Privilege Review\n```bash\n# Find privileged operations\nrg \"ensure_signed\" pallets\u002F | grep -E \"pause|emergency|admin|force|sudo\"\n\n# Should use ensure_root or custom origins\nrg \"ensure_root|ForceOrigin|AdminOrigin\" pallets\u002F\n```\n\n### Step 7: Testing Review\n- [ ] Unit tests cover all dispatchables\n- [ ] Fuzz tests for panic conditions\n- [ ] Benchmarks for weight calculation\n- [ ] try-runtime tests for migrations\n\n---\n\n## 7. Priority Guidelines\n\n### Critical (Immediate Fix Required)\n- Arithmetic overflow (token creation, balance manipulation)\n- Panic DoS (node crash risk)\n- Bad origin (unauthorized privileged operations)\n\n### High (Fix Before Launch)\n- Incorrect weights (DoS via spam)\n- Verify-first violations (state corruption, pre-v0.9.25)\n- Unsigned validation issues (spam, replay attacks)\n\n### Medium (Address in Audit)\n- Bad randomness (manipulation possible but limited impact)\n\n---\n\n## 8. Testing Recommendations\n\n### Fuzz Testing\n```rust\n\u002F\u002F Use test-fuzz for property-based testing\n#[cfg(test)]\nmod tests {\n    use test_fuzz::test_fuzz;\n\n    #[test_fuzz]\n    fn fuzz_transfer(from: AccountId, to: AccountId, amount: u128) {\n        \u002F\u002F Should never panic\n        let _ = Pallet::transfer(from, to, amount);\n    }\n\n    #[test_fuzz]\n    fn fuzz_no_panics(call: Call) {\n        \u002F\u002F No dispatchable should panic\n        let _ = call.dispatch(origin);\n    }\n}\n```\n\n### Benchmarking\n```bash\n# Run benchmarks to generate weights\ncargo build --release --features runtime-benchmarks\n.\u002Ftarget\u002Frelease\u002Fnode benchmark pallet \\\n    --chain dev \\\n    --pallet pallet_example \\\n    --extrinsic \"*\" \\\n    --steps 50 \\\n    --repeat 20\n```\n\n### try-runtime\n```bash\n# Test runtime upgrades\ncargo build --release --features try-runtime\ntry-runtime --runtime .\u002Ftarget\u002Frelease\u002Fwbuild\u002Fruntime.wasm \\\n    on-runtime-upgrade live --uri wss:\u002F\u002Frpc.polkadot.io\n```\n\n---\n\n## 9. Additional Resources\n\n- **Building Secure Contracts**: `building-secure-contracts\u002Fnot-so-smart-contracts\u002Fsubstrate\u002F`\n- **Substrate Documentation**: https:\u002F\u002Fdocs.substrate.io\u002F\n- **FRAME Documentation**: https:\u002F\u002Fparitytech.github.io\u002Fsubstrate\u002Fmaster\u002Fframe_support\u002F\n- **test-fuzz**: https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Ftest-fuzz\n- **Substrate StackExchange**: https:\u002F\u002Fsubstrate.stackexchange.com\u002F\n\n---\n\n## 10. Quick Reference Checklist\n\nBefore completing Substrate pallet audit:\n\n**Arithmetic Safety (CRITICAL)**:\n- [ ] No direct `+`, `-`, `*`, `\u002F` operators in dispatchables\n- [ ] All arithmetic uses `checked_*` or `saturating_*`\n- [ ] Type conversions use `try_into()` with error handling\n\n**Panic Prevention (CRITICAL)**:\n- [ ] No `unwrap()` or `expect()` in dispatchables\n- [ ] No direct array\u002Fslice indexing without bounds check\n- [ ] All user inputs validated with `ensure!`\n- [ ] Division operations check for zero divisor\n\n**Weights & DoS (CRITICAL)**:\n- [ ] Weights proportional to computational cost\n- [ ] Input parameters have maximum bounds\n- [ ] Benchmarking used to determine weights\n- [ ] No free (zero-weight) expensive operations\n\n**Access Control (CRITICAL)**:\n- [ ] Privileged operations use `ensure_root` or custom origins\n- [ ] `ensure_signed` only for user-level operations\n- [ ] Origin types properly configured in runtime\n- [ ] Sudo pallet removed before production\n\n**Storage Safety (HIGH)**:\n- [ ] Using Substrate v0.9.25+ OR manual `#[transactional]`\n- [ ] Validation before storage writes\n- [ ] Events emitted after successful operations\n\n**Other (MEDIUM)**:\n- [ ] Unsigned transactions use signed alternative if possible\n- [ ] If unsigned: proper validation, replay protection, authentication\n- [ ] BABE randomness used (not RandomnessCollectiveFlip)\n- [ ] Randomness uses `random(subject)` not `random_seed()`\n\n**Testing**:\n- [ ] Unit tests for all dispatchables\n- [ ] Fuzz tests to find panics\n- [ ] Benchmarks generated and verified\n- [ ] try-runtime tests for migrations\n",{"data":39,"body":40},{"name":4,"description":6},{"type":41,"children":42},"root",[43,51,58,64,70,105,111,118,139,145,373,379,434,440,483,487,493,498,552,555,561,575,581,892,902,905,911,917,952,958,971,1024,1030,1186,1192,1294,1300,1346,1352,1458,1464,1504,1507,1513,1519,1537,1543,1561,1567,1575,1578,1584,1590,1727,1733,1889,1893,1976,1979,1985,2063,2066,2072,2077,2087,2162,2171,2229,2238,2278,2287,2341,2350,2386,2395,2446,2455,2494],{"type":44,"tag":45,"props":46,"children":47},"element","h1",{"id":4},[48],{"type":49,"value":50},"text","Substrate Vulnerability Scanner",{"type":44,"tag":52,"props":53,"children":55},"h2",{"id":54},"_1-purpose",[56],{"type":49,"value":57},"1. Purpose",{"type":44,"tag":59,"props":60,"children":61},"p",{},[62],{"type":49,"value":63},"Systematically scan Substrate runtime modules (pallets) for platform-specific security vulnerabilities that can cause node crashes, DoS attacks, or unauthorized access. This skill encodes 7 critical vulnerability patterns unique to Substrate\u002FFRAME-based chains.",{"type":44,"tag":52,"props":65,"children":67},{"id":66},"_2-when-to-use-this-skill",[68],{"type":49,"value":69},"2. When to Use This Skill",{"type":44,"tag":71,"props":72,"children":73},"ul",{},[74,80,85,90,95,100],{"type":44,"tag":75,"props":76,"children":77},"li",{},[78],{"type":49,"value":79},"Auditing custom Substrate pallets",{"type":44,"tag":75,"props":81,"children":82},{},[83],{"type":49,"value":84},"Reviewing FRAME runtime code",{"type":44,"tag":75,"props":86,"children":87},{},[88],{"type":49,"value":89},"Pre-launch security assessment of Substrate chains (Polkadot parachains, standalone chains)",{"type":44,"tag":75,"props":91,"children":92},{},[93],{"type":49,"value":94},"Validating dispatchable extrinsic functions",{"type":44,"tag":75,"props":96,"children":97},{},[98],{"type":49,"value":99},"Reviewing weight calculation functions",{"type":44,"tag":75,"props":101,"children":102},{},[103],{"type":49,"value":104},"Assessing unsigned transaction validation logic",{"type":44,"tag":52,"props":106,"children":108},{"id":107},"_3-platform-detection",[109],{"type":49,"value":110},"3. Platform Detection",{"type":44,"tag":112,"props":113,"children":115},"h3",{"id":114},"file-extensions-indicators",[116],{"type":49,"value":117},"File Extensions & Indicators",{"type":44,"tag":71,"props":119,"children":120},{},[121],{"type":44,"tag":75,"props":122,"children":123},{},[124,130,132],{"type":44,"tag":125,"props":126,"children":127},"strong",{},[128],{"type":49,"value":129},"Rust files",{"type":49,"value":131},": ",{"type":44,"tag":133,"props":134,"children":136},"code",{"className":135},[],[137],{"type":49,"value":138},".rs",{"type":44,"tag":112,"props":140,"children":142},{"id":141},"languageframework-markers",[143],{"type":49,"value":144},"Language\u002FFramework Markers",{"type":44,"tag":146,"props":147,"children":152},"pre",{"className":148,"code":149,"language":150,"meta":151,"style":151},"language-rust shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","\u002F\u002F Substrate\u002FFRAME indicators\n#[pallet]\npub mod pallet {\n    use frame_support::pallet_prelude::*;\n    use frame_system::pallet_prelude::*;\n\n    #[pallet::config]\n    pub trait Config: frame_system::Config { }\n\n    #[pallet::call]\n    impl\u003CT: Config> Pallet\u003CT> {\n        #[pallet::weight(10_000)]\n        pub fn example_function(origin: OriginFor\u003CT>) -> DispatchResult { }\n    }\n}\n\n\u002F\u002F Common patterns\nDispatchResult, DispatchError\nensure!, ensure_signed, ensure_root\nStorageValue, StorageMap, StorageDoubleMap\n#[pallet::storage]\n#[pallet::call]\n#[pallet::weight]\n#[pallet::validate_unsigned]\n","rust","",[153],{"type":44,"tag":133,"props":154,"children":155},{"__ignoreMap":151},[156,167,176,185,194,203,213,222,231,239,248,257,266,275,284,293,301,310,319,328,337,346,355,364],{"type":44,"tag":157,"props":158,"children":161},"span",{"class":159,"line":160},"line",1,[162],{"type":44,"tag":157,"props":163,"children":164},{},[165],{"type":49,"value":166},"\u002F\u002F Substrate\u002FFRAME indicators\n",{"type":44,"tag":157,"props":168,"children":170},{"class":159,"line":169},2,[171],{"type":44,"tag":157,"props":172,"children":173},{},[174],{"type":49,"value":175},"#[pallet]\n",{"type":44,"tag":157,"props":177,"children":179},{"class":159,"line":178},3,[180],{"type":44,"tag":157,"props":181,"children":182},{},[183],{"type":49,"value":184},"pub mod pallet {\n",{"type":44,"tag":157,"props":186,"children":188},{"class":159,"line":187},4,[189],{"type":44,"tag":157,"props":190,"children":191},{},[192],{"type":49,"value":193},"    use frame_support::pallet_prelude::*;\n",{"type":44,"tag":157,"props":195,"children":197},{"class":159,"line":196},5,[198],{"type":44,"tag":157,"props":199,"children":200},{},[201],{"type":49,"value":202},"    use frame_system::pallet_prelude::*;\n",{"type":44,"tag":157,"props":204,"children":206},{"class":159,"line":205},6,[207],{"type":44,"tag":157,"props":208,"children":210},{"emptyLinePlaceholder":209},true,[211],{"type":49,"value":212},"\n",{"type":44,"tag":157,"props":214,"children":216},{"class":159,"line":215},7,[217],{"type":44,"tag":157,"props":218,"children":219},{},[220],{"type":49,"value":221},"    #[pallet::config]\n",{"type":44,"tag":157,"props":223,"children":225},{"class":159,"line":224},8,[226],{"type":44,"tag":157,"props":227,"children":228},{},[229],{"type":49,"value":230},"    pub trait Config: frame_system::Config { }\n",{"type":44,"tag":157,"props":232,"children":234},{"class":159,"line":233},9,[235],{"type":44,"tag":157,"props":236,"children":237},{"emptyLinePlaceholder":209},[238],{"type":49,"value":212},{"type":44,"tag":157,"props":240,"children":242},{"class":159,"line":241},10,[243],{"type":44,"tag":157,"props":244,"children":245},{},[246],{"type":49,"value":247},"    #[pallet::call]\n",{"type":44,"tag":157,"props":249,"children":251},{"class":159,"line":250},11,[252],{"type":44,"tag":157,"props":253,"children":254},{},[255],{"type":49,"value":256},"    impl\u003CT: Config> Pallet\u003CT> {\n",{"type":44,"tag":157,"props":258,"children":260},{"class":159,"line":259},12,[261],{"type":44,"tag":157,"props":262,"children":263},{},[264],{"type":49,"value":265},"        #[pallet::weight(10_000)]\n",{"type":44,"tag":157,"props":267,"children":269},{"class":159,"line":268},13,[270],{"type":44,"tag":157,"props":271,"children":272},{},[273],{"type":49,"value":274},"        pub fn example_function(origin: OriginFor\u003CT>) -> DispatchResult { }\n",{"type":44,"tag":157,"props":276,"children":278},{"class":159,"line":277},14,[279],{"type":44,"tag":157,"props":280,"children":281},{},[282],{"type":49,"value":283},"    }\n",{"type":44,"tag":157,"props":285,"children":287},{"class":159,"line":286},15,[288],{"type":44,"tag":157,"props":289,"children":290},{},[291],{"type":49,"value":292},"}\n",{"type":44,"tag":157,"props":294,"children":296},{"class":159,"line":295},16,[297],{"type":44,"tag":157,"props":298,"children":299},{"emptyLinePlaceholder":209},[300],{"type":49,"value":212},{"type":44,"tag":157,"props":302,"children":304},{"class":159,"line":303},17,[305],{"type":44,"tag":157,"props":306,"children":307},{},[308],{"type":49,"value":309},"\u002F\u002F Common patterns\n",{"type":44,"tag":157,"props":311,"children":313},{"class":159,"line":312},18,[314],{"type":44,"tag":157,"props":315,"children":316},{},[317],{"type":49,"value":318},"DispatchResult, DispatchError\n",{"type":44,"tag":157,"props":320,"children":322},{"class":159,"line":321},19,[323],{"type":44,"tag":157,"props":324,"children":325},{},[326],{"type":49,"value":327},"ensure!, ensure_signed, ensure_root\n",{"type":44,"tag":157,"props":329,"children":331},{"class":159,"line":330},20,[332],{"type":44,"tag":157,"props":333,"children":334},{},[335],{"type":49,"value":336},"StorageValue, StorageMap, StorageDoubleMap\n",{"type":44,"tag":157,"props":338,"children":340},{"class":159,"line":339},21,[341],{"type":44,"tag":157,"props":342,"children":343},{},[344],{"type":49,"value":345},"#[pallet::storage]\n",{"type":44,"tag":157,"props":347,"children":349},{"class":159,"line":348},22,[350],{"type":44,"tag":157,"props":351,"children":352},{},[353],{"type":49,"value":354},"#[pallet::call]\n",{"type":44,"tag":157,"props":356,"children":358},{"class":159,"line":357},23,[359],{"type":44,"tag":157,"props":360,"children":361},{},[362],{"type":49,"value":363},"#[pallet::weight]\n",{"type":44,"tag":157,"props":365,"children":367},{"class":159,"line":366},24,[368],{"type":44,"tag":157,"props":369,"children":370},{},[371],{"type":49,"value":372},"#[pallet::validate_unsigned]\n",{"type":44,"tag":112,"props":374,"children":376},{"id":375},"project-structure",[377],{"type":49,"value":378},"Project Structure",{"type":44,"tag":71,"props":380,"children":381},{},[382,393,404,415],{"type":44,"tag":75,"props":383,"children":384},{},[385,391],{"type":44,"tag":133,"props":386,"children":388},{"className":387},[],[389],{"type":49,"value":390},"pallets\u002F*\u002Flib.rs",{"type":49,"value":392}," - Pallet implementations",{"type":44,"tag":75,"props":394,"children":395},{},[396,402],{"type":44,"tag":133,"props":397,"children":399},{"className":398},[],[400],{"type":49,"value":401},"runtime\u002Flib.rs",{"type":49,"value":403}," - Runtime configuration",{"type":44,"tag":75,"props":405,"children":406},{},[407,413],{"type":44,"tag":133,"props":408,"children":410},{"className":409},[],[411],{"type":49,"value":412},"benchmarking.rs",{"type":49,"value":414}," - Weight benchmarks",{"type":44,"tag":75,"props":416,"children":417},{},[418,424,426,432],{"type":44,"tag":133,"props":419,"children":421},{"className":420},[],[422],{"type":49,"value":423},"Cargo.toml",{"type":49,"value":425}," with ",{"type":44,"tag":133,"props":427,"children":429},{"className":428},[],[430],{"type":49,"value":431},"frame-*",{"type":49,"value":433}," dependencies",{"type":44,"tag":112,"props":435,"children":437},{"id":436},"tool-support",[438],{"type":49,"value":439},"Tool Support",{"type":44,"tag":71,"props":441,"children":442},{},[443,453,463,473],{"type":44,"tag":75,"props":444,"children":445},{},[446,451],{"type":44,"tag":125,"props":447,"children":448},{},[449],{"type":49,"value":450},"cargo-fuzz",{"type":49,"value":452},": Fuzz testing for Rust",{"type":44,"tag":75,"props":454,"children":455},{},[456,461],{"type":44,"tag":125,"props":457,"children":458},{},[459],{"type":49,"value":460},"test-fuzz",{"type":49,"value":462},": Property-based testing framework",{"type":44,"tag":75,"props":464,"children":465},{},[466,471],{"type":44,"tag":125,"props":467,"children":468},{},[469],{"type":49,"value":470},"benchmarking framework",{"type":49,"value":472},": Built-in weight calculation",{"type":44,"tag":75,"props":474,"children":475},{},[476,481],{"type":44,"tag":125,"props":477,"children":478},{},[479],{"type":49,"value":480},"try-runtime",{"type":49,"value":482},": Runtime migration testing",{"type":44,"tag":484,"props":485,"children":486},"hr",{},[],{"type":44,"tag":52,"props":488,"children":490},{"id":489},"_4-how-this-skill-works",[491],{"type":49,"value":492},"4. How This Skill Works",{"type":44,"tag":59,"props":494,"children":495},{},[496],{"type":49,"value":497},"When invoked, I will:",{"type":44,"tag":499,"props":500,"children":501},"ol",{},[502,512,522,532,542],{"type":44,"tag":75,"props":503,"children":504},{},[505,510],{"type":44,"tag":125,"props":506,"children":507},{},[508],{"type":49,"value":509},"Search your codebase",{"type":49,"value":511}," for Substrate pallets",{"type":44,"tag":75,"props":513,"children":514},{},[515,520],{"type":44,"tag":125,"props":516,"children":517},{},[518],{"type":49,"value":519},"Analyze each pallet",{"type":49,"value":521}," for the 7 vulnerability patterns",{"type":44,"tag":75,"props":523,"children":524},{},[525,530],{"type":44,"tag":125,"props":526,"children":527},{},[528],{"type":49,"value":529},"Report findings",{"type":49,"value":531}," with file references and severity",{"type":44,"tag":75,"props":533,"children":534},{},[535,540],{"type":44,"tag":125,"props":536,"children":537},{},[538],{"type":49,"value":539},"Provide fixes",{"type":49,"value":541}," for each identified issue",{"type":44,"tag":75,"props":543,"children":544},{},[545,550],{"type":44,"tag":125,"props":546,"children":547},{},[548],{"type":49,"value":549},"Check weight calculations",{"type":49,"value":551}," and origin validation",{"type":44,"tag":484,"props":553,"children":554},{},[],{"type":44,"tag":52,"props":556,"children":558},{"id":557},"_5-vulnerability-patterns-7-critical-patterns",[559],{"type":49,"value":560},"5. Vulnerability Patterns (7 Critical Patterns)",{"type":44,"tag":59,"props":562,"children":563},{},[564,566,573],{"type":49,"value":565},"I check for 7 critical vulnerability patterns unique to Substrate\u002FFRAME. For detailed detection patterns, code examples, mitigations, and testing strategies, see ",{"type":44,"tag":567,"props":568,"children":570},"a",{"href":569},"resources\u002FVULNERABILITY_PATTERNS.md",[571],{"type":49,"value":572},"VULNERABILITY_PATTERNS.md",{"type":49,"value":574},".",{"type":44,"tag":112,"props":576,"children":578},{"id":577},"pattern-summary",[579],{"type":49,"value":580},"Pattern Summary:",{"type":44,"tag":499,"props":582,"children":583},{},[584,658,707,734,768,796,852],{"type":44,"tag":75,"props":585,"children":586},{},[587,592,594],{"type":44,"tag":125,"props":588,"children":589},{},[590],{"type":49,"value":591},"Arithmetic Overflow",{"type":49,"value":593}," ⚠️ CRITICAL",{"type":44,"tag":71,"props":595,"children":596},{},[597,632,653],{"type":44,"tag":75,"props":598,"children":599},{},[600,602,608,610,616,617,623,624,630],{"type":49,"value":601},"Direct ",{"type":44,"tag":133,"props":603,"children":605},{"className":604},[],[606],{"type":49,"value":607},"+",{"type":49,"value":609},", ",{"type":44,"tag":133,"props":611,"children":613},{"className":612},[],[614],{"type":49,"value":615},"-",{"type":49,"value":609},{"type":44,"tag":133,"props":618,"children":620},{"className":619},[],[621],{"type":49,"value":622},"*",{"type":49,"value":609},{"type":44,"tag":133,"props":625,"children":627},{"className":626},[],[628],{"type":49,"value":629},"\u002F",{"type":49,"value":631}," operators wrap in release mode",{"type":44,"tag":75,"props":633,"children":634},{},[635,637,643,645,651],{"type":49,"value":636},"Must use ",{"type":44,"tag":133,"props":638,"children":640},{"className":639},[],[641],{"type":49,"value":642},"checked_*",{"type":49,"value":644}," or ",{"type":44,"tag":133,"props":646,"children":648},{"className":647},[],[649],{"type":49,"value":650},"saturating_*",{"type":49,"value":652}," methods",{"type":44,"tag":75,"props":654,"children":655},{},[656],{"type":49,"value":657},"Affects balance\u002Ftoken calculations, reward\u002Ffee math",{"type":44,"tag":75,"props":659,"children":660},{},[661,666,668],{"type":44,"tag":125,"props":662,"children":663},{},[664],{"type":49,"value":665},"Don't Panic",{"type":49,"value":667}," ⚠️ CRITICAL - DoS",{"type":44,"tag":71,"props":669,"children":670},{},[671,676,696],{"type":44,"tag":75,"props":672,"children":673},{},[674],{"type":49,"value":675},"Panics cause node to stop processing blocks",{"type":44,"tag":75,"props":677,"children":678},{},[679,681,687,688,694],{"type":49,"value":680},"No ",{"type":44,"tag":133,"props":682,"children":684},{"className":683},[],[685],{"type":49,"value":686},"unwrap()",{"type":49,"value":609},{"type":44,"tag":133,"props":689,"children":691},{"className":690},[],[692],{"type":49,"value":693},"expect()",{"type":49,"value":695},", array indexing without bounds check",{"type":44,"tag":75,"props":697,"children":698},{},[699,701],{"type":49,"value":700},"All user input must be validated with ",{"type":44,"tag":133,"props":702,"children":704},{"className":703},[],[705],{"type":49,"value":706},"ensure!",{"type":44,"tag":75,"props":708,"children":709},{},[710,715,716],{"type":44,"tag":125,"props":711,"children":712},{},[713],{"type":49,"value":714},"Weights and Fees",{"type":49,"value":667},{"type":44,"tag":71,"props":717,"children":718},{},[719,724,729],{"type":44,"tag":75,"props":720,"children":721},{},[722],{"type":49,"value":723},"Incorrect weights allow spam attacks",{"type":44,"tag":75,"props":725,"children":726},{},[727],{"type":49,"value":728},"Fixed weights for variable-cost operations enable DoS",{"type":44,"tag":75,"props":730,"children":731},{},[732],{"type":49,"value":733},"Must use benchmarking framework, bound all input parameters",{"type":44,"tag":75,"props":735,"children":736},{},[737,742,744],{"type":44,"tag":125,"props":738,"children":739},{},[740],{"type":49,"value":741},"Verify First, Write Last",{"type":49,"value":743}," ⚠️ HIGH (Pre-v0.9.25)",{"type":44,"tag":71,"props":745,"children":746},{},[747,752,757],{"type":44,"tag":75,"props":748,"children":749},{},[750],{"type":49,"value":751},"Storage writes before validation persist on error (pre-v0.9.25)",{"type":44,"tag":75,"props":753,"children":754},{},[755],{"type":49,"value":756},"Pattern: validate → write → emit event",{"type":44,"tag":75,"props":758,"children":759},{},[760,762],{"type":49,"value":761},"Upgrade to v0.9.25+ or use manual ",{"type":44,"tag":133,"props":763,"children":765},{"className":764},[],[766],{"type":49,"value":767},"#[transactional]",{"type":44,"tag":75,"props":769,"children":770},{},[771,776,778],{"type":44,"tag":125,"props":772,"children":773},{},[774],{"type":49,"value":775},"Unsigned Transaction Validation",{"type":49,"value":777}," ⚠️ HIGH",{"type":44,"tag":71,"props":779,"children":780},{},[781,786,791],{"type":44,"tag":75,"props":782,"children":783},{},[784],{"type":49,"value":785},"Insufficient validation allows spam\u002Freplay attacks",{"type":44,"tag":75,"props":787,"children":788},{},[789],{"type":49,"value":790},"Prefer signed transactions",{"type":44,"tag":75,"props":792,"children":793},{},[794],{"type":49,"value":795},"If unsigned: validate parameters, replay protection, authenticate source",{"type":44,"tag":75,"props":797,"children":798},{},[799,804,806],{"type":44,"tag":125,"props":800,"children":801},{},[802],{"type":49,"value":803},"Bad Randomness",{"type":49,"value":805}," ⚠️ MEDIUM",{"type":44,"tag":71,"props":807,"children":808},{},[809,820,833],{"type":44,"tag":75,"props":810,"children":811},{},[812,818],{"type":44,"tag":133,"props":813,"children":815},{"className":814},[],[816],{"type":49,"value":817},"pallet_randomness_collective_flip",{"type":49,"value":819}," vulnerable to collusion",{"type":44,"tag":75,"props":821,"children":822},{},[823,825,831],{"type":49,"value":824},"Must use BABE randomness (",{"type":44,"tag":133,"props":826,"children":828},{"className":827},[],[829],{"type":49,"value":830},"pallet_babe::RandomnessFromOneEpochAgo",{"type":49,"value":832},")",{"type":44,"tag":75,"props":834,"children":835},{},[836,838,844,846],{"type":49,"value":837},"Use ",{"type":44,"tag":133,"props":839,"children":841},{"className":840},[],[842],{"type":49,"value":843},"random(subject)",{"type":49,"value":845}," not ",{"type":44,"tag":133,"props":847,"children":849},{"className":848},[],[850],{"type":49,"value":851},"random_seed()",{"type":44,"tag":75,"props":853,"children":854},{},[855,860,861],{"type":44,"tag":125,"props":856,"children":857},{},[858],{"type":49,"value":859},"Bad Origin",{"type":49,"value":593},{"type":44,"tag":71,"props":862,"children":863},{},[864,875,887],{"type":44,"tag":75,"props":865,"children":866},{},[867,873],{"type":44,"tag":133,"props":868,"children":870},{"className":869},[],[871],{"type":49,"value":872},"ensure_signed",{"type":49,"value":874}," allows any user for privileged operations",{"type":44,"tag":75,"props":876,"children":877},{},[878,879,885],{"type":49,"value":636},{"type":44,"tag":133,"props":880,"children":882},{"className":881},[],[883],{"type":49,"value":884},"ensure_root",{"type":49,"value":886}," or custom origins (ForceOrigin, AdminOrigin)",{"type":44,"tag":75,"props":888,"children":889},{},[890],{"type":49,"value":891},"Origin types must be properly configured in runtime",{"type":44,"tag":59,"props":893,"children":894},{},[895,897,901],{"type":49,"value":896},"For complete vulnerability patterns with code examples, see ",{"type":44,"tag":567,"props":898,"children":899},{"href":569},[900],{"type":49,"value":572},{"type":49,"value":574},{"type":44,"tag":484,"props":903,"children":904},{},[],{"type":44,"tag":52,"props":906,"children":908},{"id":907},"_6-scanning-workflow",[909],{"type":49,"value":910},"6. Scanning Workflow",{"type":44,"tag":112,"props":912,"children":914},{"id":913},"step-1-platform-identification",[915],{"type":49,"value":916},"Step 1: Platform Identification",{"type":44,"tag":499,"props":918,"children":919},{},[920,925,930,941],{"type":44,"tag":75,"props":921,"children":922},{},[923],{"type":49,"value":924},"Verify Substrate\u002FFRAME framework usage",{"type":44,"tag":75,"props":926,"children":927},{},[928],{"type":49,"value":929},"Check Substrate version (v0.9.25+ has transactional storage)",{"type":44,"tag":75,"props":931,"children":932},{},[933,935,940],{"type":49,"value":934},"Locate pallet implementations (",{"type":44,"tag":133,"props":936,"children":938},{"className":937},[],[939],{"type":49,"value":390},{"type":49,"value":832},{"type":44,"tag":75,"props":942,"children":943},{},[944,946,951],{"type":49,"value":945},"Identify runtime configuration (",{"type":44,"tag":133,"props":947,"children":949},{"className":948},[],[950],{"type":49,"value":401},{"type":49,"value":832},{"type":44,"tag":112,"props":953,"children":955},{"id":954},"step-2-dispatchable-analysis",[956],{"type":49,"value":957},"Step 2: Dispatchable Analysis",{"type":44,"tag":59,"props":959,"children":960},{},[961,963,969],{"type":49,"value":962},"For each ",{"type":44,"tag":133,"props":964,"children":966},{"className":965},[],[967],{"type":49,"value":968},"#[pallet::call]",{"type":49,"value":970}," function:",{"type":44,"tag":71,"props":972,"children":975},{"className":973},[974],"contains-task-list",[976,988,997,1006,1015],{"type":44,"tag":75,"props":977,"children":980},{"className":978},[979],"task-list-item",[981,986],{"type":44,"tag":982,"props":983,"children":985},"input",{"disabled":209,"type":984},"checkbox",[],{"type":49,"value":987}," Arithmetic: Uses checked\u002Fsaturating operations?",{"type":44,"tag":75,"props":989,"children":991},{"className":990},[979],[992,995],{"type":44,"tag":982,"props":993,"children":994},{"disabled":209,"type":984},[],{"type":49,"value":996}," Panics: No unwrap\u002Fexpect\u002Findexing?",{"type":44,"tag":75,"props":998,"children":1000},{"className":999},[979],[1001,1004],{"type":44,"tag":982,"props":1002,"children":1003},{"disabled":209,"type":984},[],{"type":49,"value":1005}," Weights: Proportional to cost, bounded inputs?",{"type":44,"tag":75,"props":1007,"children":1009},{"className":1008},[979],[1010,1013],{"type":44,"tag":982,"props":1011,"children":1012},{"disabled":209,"type":984},[],{"type":49,"value":1014}," Origin: Appropriate validation level?",{"type":44,"tag":75,"props":1016,"children":1018},{"className":1017},[979],[1019,1022],{"type":44,"tag":982,"props":1020,"children":1021},{"disabled":209,"type":984},[],{"type":49,"value":1023}," Validation: All checks before storage writes?",{"type":44,"tag":112,"props":1025,"children":1027},{"id":1026},"step-3-panic-sweep",[1028],{"type":49,"value":1029},"Step 3: Panic Sweep",{"type":44,"tag":146,"props":1031,"children":1035},{"className":1032,"code":1033,"language":1034,"meta":151,"style":151},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# Search for panic-prone patterns\nrg \"unwrap\\(\\)\" pallets\u002F\nrg \"expect\\(\" pallets\u002F\nrg \"\\[.*\\]\" pallets\u002F  # Array indexing\nrg \" as u\\d+\" pallets\u002F  # Type casts\nrg \"\\.unwrap_or\" pallets\u002F\n","bash",[1036],{"type":44,"tag":133,"props":1037,"children":1038},{"__ignoreMap":151},[1039,1048,1079,1103,1133,1162],{"type":44,"tag":157,"props":1040,"children":1041},{"class":159,"line":160},[1042],{"type":44,"tag":157,"props":1043,"children":1045},{"style":1044},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[1046],{"type":49,"value":1047},"# Search for panic-prone patterns\n",{"type":44,"tag":157,"props":1049,"children":1050},{"class":159,"line":169},[1051,1057,1063,1069,1074],{"type":44,"tag":157,"props":1052,"children":1054},{"style":1053},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[1055],{"type":49,"value":1056},"rg",{"type":44,"tag":157,"props":1058,"children":1060},{"style":1059},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[1061],{"type":49,"value":1062}," \"",{"type":44,"tag":157,"props":1064,"children":1066},{"style":1065},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[1067],{"type":49,"value":1068},"unwrap\\(\\)",{"type":44,"tag":157,"props":1070,"children":1071},{"style":1059},[1072],{"type":49,"value":1073},"\"",{"type":44,"tag":157,"props":1075,"children":1076},{"style":1065},[1077],{"type":49,"value":1078}," pallets\u002F\n",{"type":44,"tag":157,"props":1080,"children":1081},{"class":159,"line":178},[1082,1086,1090,1095,1099],{"type":44,"tag":157,"props":1083,"children":1084},{"style":1053},[1085],{"type":49,"value":1056},{"type":44,"tag":157,"props":1087,"children":1088},{"style":1059},[1089],{"type":49,"value":1062},{"type":44,"tag":157,"props":1091,"children":1092},{"style":1065},[1093],{"type":49,"value":1094},"expect\\(",{"type":44,"tag":157,"props":1096,"children":1097},{"style":1059},[1098],{"type":49,"value":1073},{"type":44,"tag":157,"props":1100,"children":1101},{"style":1065},[1102],{"type":49,"value":1078},{"type":44,"tag":157,"props":1104,"children":1105},{"class":159,"line":187},[1106,1110,1114,1119,1123,1128],{"type":44,"tag":157,"props":1107,"children":1108},{"style":1053},[1109],{"type":49,"value":1056},{"type":44,"tag":157,"props":1111,"children":1112},{"style":1059},[1113],{"type":49,"value":1062},{"type":44,"tag":157,"props":1115,"children":1116},{"style":1065},[1117],{"type":49,"value":1118},"\\[.*\\]",{"type":44,"tag":157,"props":1120,"children":1121},{"style":1059},[1122],{"type":49,"value":1073},{"type":44,"tag":157,"props":1124,"children":1125},{"style":1065},[1126],{"type":49,"value":1127}," pallets\u002F",{"type":44,"tag":157,"props":1129,"children":1130},{"style":1044},[1131],{"type":49,"value":1132},"  # Array indexing\n",{"type":44,"tag":157,"props":1134,"children":1135},{"class":159,"line":196},[1136,1140,1144,1149,1153,1157],{"type":44,"tag":157,"props":1137,"children":1138},{"style":1053},[1139],{"type":49,"value":1056},{"type":44,"tag":157,"props":1141,"children":1142},{"style":1059},[1143],{"type":49,"value":1062},{"type":44,"tag":157,"props":1145,"children":1146},{"style":1065},[1147],{"type":49,"value":1148}," as u\\d+",{"type":44,"tag":157,"props":1150,"children":1151},{"style":1059},[1152],{"type":49,"value":1073},{"type":44,"tag":157,"props":1154,"children":1155},{"style":1065},[1156],{"type":49,"value":1127},{"type":44,"tag":157,"props":1158,"children":1159},{"style":1044},[1160],{"type":49,"value":1161},"  # Type casts\n",{"type":44,"tag":157,"props":1163,"children":1164},{"class":159,"line":205},[1165,1169,1173,1178,1182],{"type":44,"tag":157,"props":1166,"children":1167},{"style":1053},[1168],{"type":49,"value":1056},{"type":44,"tag":157,"props":1170,"children":1171},{"style":1059},[1172],{"type":49,"value":1062},{"type":44,"tag":157,"props":1174,"children":1175},{"style":1065},[1176],{"type":49,"value":1177},"\\.unwrap_or",{"type":44,"tag":157,"props":1179,"children":1180},{"style":1059},[1181],{"type":49,"value":1073},{"type":44,"tag":157,"props":1183,"children":1184},{"style":1065},[1185],{"type":49,"value":1078},{"type":44,"tag":112,"props":1187,"children":1189},{"id":1188},"step-4-arithmetic-safety-check",[1190],{"type":49,"value":1191},"Step 4: Arithmetic Safety Check",{"type":44,"tag":146,"props":1193,"children":1195},{"className":1032,"code":1194,"language":1034,"meta":151,"style":151},"# Find direct arithmetic\nrg \" \\+ |\\+=| - |-=| \\* |\\*=| \u002F |\u002F=\" pallets\u002F\n\n# Should find checked\u002Fsaturating alternatives instead\nrg \"checked_add|checked_sub|checked_mul|checked_div\" pallets\u002F\nrg \"saturating_add|saturating_sub|saturating_mul\" pallets\u002F\n",[1196],{"type":44,"tag":133,"props":1197,"children":1198},{"__ignoreMap":151},[1199,1207,1231,1238,1246,1270],{"type":44,"tag":157,"props":1200,"children":1201},{"class":159,"line":160},[1202],{"type":44,"tag":157,"props":1203,"children":1204},{"style":1044},[1205],{"type":49,"value":1206},"# Find direct arithmetic\n",{"type":44,"tag":157,"props":1208,"children":1209},{"class":159,"line":169},[1210,1214,1218,1223,1227],{"type":44,"tag":157,"props":1211,"children":1212},{"style":1053},[1213],{"type":49,"value":1056},{"type":44,"tag":157,"props":1215,"children":1216},{"style":1059},[1217],{"type":49,"value":1062},{"type":44,"tag":157,"props":1219,"children":1220},{"style":1065},[1221],{"type":49,"value":1222}," \\+ |\\+=| - |-=| \\* |\\*=| \u002F |\u002F=",{"type":44,"tag":157,"props":1224,"children":1225},{"style":1059},[1226],{"type":49,"value":1073},{"type":44,"tag":157,"props":1228,"children":1229},{"style":1065},[1230],{"type":49,"value":1078},{"type":44,"tag":157,"props":1232,"children":1233},{"class":159,"line":178},[1234],{"type":44,"tag":157,"props":1235,"children":1236},{"emptyLinePlaceholder":209},[1237],{"type":49,"value":212},{"type":44,"tag":157,"props":1239,"children":1240},{"class":159,"line":187},[1241],{"type":44,"tag":157,"props":1242,"children":1243},{"style":1044},[1244],{"type":49,"value":1245},"# Should find checked\u002Fsaturating alternatives instead\n",{"type":44,"tag":157,"props":1247,"children":1248},{"class":159,"line":196},[1249,1253,1257,1262,1266],{"type":44,"tag":157,"props":1250,"children":1251},{"style":1053},[1252],{"type":49,"value":1056},{"type":44,"tag":157,"props":1254,"children":1255},{"style":1059},[1256],{"type":49,"value":1062},{"type":44,"tag":157,"props":1258,"children":1259},{"style":1065},[1260],{"type":49,"value":1261},"checked_add|checked_sub|checked_mul|checked_div",{"type":44,"tag":157,"props":1263,"children":1264},{"style":1059},[1265],{"type":49,"value":1073},{"type":44,"tag":157,"props":1267,"children":1268},{"style":1065},[1269],{"type":49,"value":1078},{"type":44,"tag":157,"props":1271,"children":1272},{"class":159,"line":205},[1273,1277,1281,1286,1290],{"type":44,"tag":157,"props":1274,"children":1275},{"style":1053},[1276],{"type":49,"value":1056},{"type":44,"tag":157,"props":1278,"children":1279},{"style":1059},[1280],{"type":49,"value":1062},{"type":44,"tag":157,"props":1282,"children":1283},{"style":1065},[1284],{"type":49,"value":1285},"saturating_add|saturating_sub|saturating_mul",{"type":44,"tag":157,"props":1287,"children":1288},{"style":1059},[1289],{"type":49,"value":1073},{"type":44,"tag":157,"props":1291,"children":1292},{"style":1065},[1293],{"type":49,"value":1078},{"type":44,"tag":112,"props":1295,"children":1297},{"id":1296},"step-5-weight-analysis",[1298],{"type":49,"value":1299},"Step 5: Weight Analysis",{"type":44,"tag":71,"props":1301,"children":1303},{"className":1302},[974],[1304,1319,1328,1337],{"type":44,"tag":75,"props":1305,"children":1307},{"className":1306},[979],[1308,1311,1313],{"type":44,"tag":982,"props":1309,"children":1310},{"disabled":209,"type":984},[],{"type":49,"value":1312}," Run benchmarking: ",{"type":44,"tag":133,"props":1314,"children":1316},{"className":1315},[],[1317],{"type":49,"value":1318},"cargo test --features runtime-benchmarks",{"type":44,"tag":75,"props":1320,"children":1322},{"className":1321},[979],[1323,1326],{"type":44,"tag":982,"props":1324,"children":1325},{"disabled":209,"type":984},[],{"type":49,"value":1327}," Verify weights match computational cost",{"type":44,"tag":75,"props":1329,"children":1331},{"className":1330},[979],[1332,1335],{"type":44,"tag":982,"props":1333,"children":1334},{"disabled":209,"type":984},[],{"type":49,"value":1336}," Check for bounded input parameters",{"type":44,"tag":75,"props":1338,"children":1340},{"className":1339},[979],[1341,1344],{"type":44,"tag":982,"props":1342,"children":1343},{"disabled":209,"type":984},[],{"type":49,"value":1345}," Review weight calculation functions",{"type":44,"tag":112,"props":1347,"children":1349},{"id":1348},"step-6-origin-privilege-review",[1350],{"type":49,"value":1351},"Step 6: Origin & Privilege Review",{"type":44,"tag":146,"props":1353,"children":1355},{"className":1032,"code":1354,"language":1034,"meta":151,"style":151},"# Find privileged operations\nrg \"ensure_signed\" pallets\u002F | grep -E \"pause|emergency|admin|force|sudo\"\n\n# Should use ensure_root or custom origins\nrg \"ensure_root|ForceOrigin|AdminOrigin\" pallets\u002F\n",[1356],{"type":44,"tag":133,"props":1357,"children":1358},{"__ignoreMap":151},[1359,1367,1419,1426,1434],{"type":44,"tag":157,"props":1360,"children":1361},{"class":159,"line":160},[1362],{"type":44,"tag":157,"props":1363,"children":1364},{"style":1044},[1365],{"type":49,"value":1366},"# Find privileged operations\n",{"type":44,"tag":157,"props":1368,"children":1369},{"class":159,"line":169},[1370,1374,1378,1382,1386,1390,1395,1400,1405,1409,1414],{"type":44,"tag":157,"props":1371,"children":1372},{"style":1053},[1373],{"type":49,"value":1056},{"type":44,"tag":157,"props":1375,"children":1376},{"style":1059},[1377],{"type":49,"value":1062},{"type":44,"tag":157,"props":1379,"children":1380},{"style":1065},[1381],{"type":49,"value":872},{"type":44,"tag":157,"props":1383,"children":1384},{"style":1059},[1385],{"type":49,"value":1073},{"type":44,"tag":157,"props":1387,"children":1388},{"style":1065},[1389],{"type":49,"value":1127},{"type":44,"tag":157,"props":1391,"children":1392},{"style":1059},[1393],{"type":49,"value":1394}," |",{"type":44,"tag":157,"props":1396,"children":1397},{"style":1053},[1398],{"type":49,"value":1399}," grep",{"type":44,"tag":157,"props":1401,"children":1402},{"style":1065},[1403],{"type":49,"value":1404}," -E",{"type":44,"tag":157,"props":1406,"children":1407},{"style":1059},[1408],{"type":49,"value":1062},{"type":44,"tag":157,"props":1410,"children":1411},{"style":1065},[1412],{"type":49,"value":1413},"pause|emergency|admin|force|sudo",{"type":44,"tag":157,"props":1415,"children":1416},{"style":1059},[1417],{"type":49,"value":1418},"\"\n",{"type":44,"tag":157,"props":1420,"children":1421},{"class":159,"line":178},[1422],{"type":44,"tag":157,"props":1423,"children":1424},{"emptyLinePlaceholder":209},[1425],{"type":49,"value":212},{"type":44,"tag":157,"props":1427,"children":1428},{"class":159,"line":187},[1429],{"type":44,"tag":157,"props":1430,"children":1431},{"style":1044},[1432],{"type":49,"value":1433},"# Should use ensure_root or custom origins\n",{"type":44,"tag":157,"props":1435,"children":1436},{"class":159,"line":196},[1437,1441,1445,1450,1454],{"type":44,"tag":157,"props":1438,"children":1439},{"style":1053},[1440],{"type":49,"value":1056},{"type":44,"tag":157,"props":1442,"children":1443},{"style":1059},[1444],{"type":49,"value":1062},{"type":44,"tag":157,"props":1446,"children":1447},{"style":1065},[1448],{"type":49,"value":1449},"ensure_root|ForceOrigin|AdminOrigin",{"type":44,"tag":157,"props":1451,"children":1452},{"style":1059},[1453],{"type":49,"value":1073},{"type":44,"tag":157,"props":1455,"children":1456},{"style":1065},[1457],{"type":49,"value":1078},{"type":44,"tag":112,"props":1459,"children":1461},{"id":1460},"step-7-testing-review",[1462],{"type":49,"value":1463},"Step 7: Testing Review",{"type":44,"tag":71,"props":1465,"children":1467},{"className":1466},[974],[1468,1477,1486,1495],{"type":44,"tag":75,"props":1469,"children":1471},{"className":1470},[979],[1472,1475],{"type":44,"tag":982,"props":1473,"children":1474},{"disabled":209,"type":984},[],{"type":49,"value":1476}," Unit tests cover all dispatchables",{"type":44,"tag":75,"props":1478,"children":1480},{"className":1479},[979],[1481,1484],{"type":44,"tag":982,"props":1482,"children":1483},{"disabled":209,"type":984},[],{"type":49,"value":1485}," Fuzz tests for panic conditions",{"type":44,"tag":75,"props":1487,"children":1489},{"className":1488},[979],[1490,1493],{"type":44,"tag":982,"props":1491,"children":1492},{"disabled":209,"type":984},[],{"type":49,"value":1494}," Benchmarks for weight calculation",{"type":44,"tag":75,"props":1496,"children":1498},{"className":1497},[979],[1499,1502],{"type":44,"tag":982,"props":1500,"children":1501},{"disabled":209,"type":984},[],{"type":49,"value":1503}," try-runtime tests for migrations",{"type":44,"tag":484,"props":1505,"children":1506},{},[],{"type":44,"tag":52,"props":1508,"children":1510},{"id":1509},"_7-priority-guidelines",[1511],{"type":49,"value":1512},"7. Priority Guidelines",{"type":44,"tag":112,"props":1514,"children":1516},{"id":1515},"critical-immediate-fix-required",[1517],{"type":49,"value":1518},"Critical (Immediate Fix Required)",{"type":44,"tag":71,"props":1520,"children":1521},{},[1522,1527,1532],{"type":44,"tag":75,"props":1523,"children":1524},{},[1525],{"type":49,"value":1526},"Arithmetic overflow (token creation, balance manipulation)",{"type":44,"tag":75,"props":1528,"children":1529},{},[1530],{"type":49,"value":1531},"Panic DoS (node crash risk)",{"type":44,"tag":75,"props":1533,"children":1534},{},[1535],{"type":49,"value":1536},"Bad origin (unauthorized privileged operations)",{"type":44,"tag":112,"props":1538,"children":1540},{"id":1539},"high-fix-before-launch",[1541],{"type":49,"value":1542},"High (Fix Before Launch)",{"type":44,"tag":71,"props":1544,"children":1545},{},[1546,1551,1556],{"type":44,"tag":75,"props":1547,"children":1548},{},[1549],{"type":49,"value":1550},"Incorrect weights (DoS via spam)",{"type":44,"tag":75,"props":1552,"children":1553},{},[1554],{"type":49,"value":1555},"Verify-first violations (state corruption, pre-v0.9.25)",{"type":44,"tag":75,"props":1557,"children":1558},{},[1559],{"type":49,"value":1560},"Unsigned validation issues (spam, replay attacks)",{"type":44,"tag":112,"props":1562,"children":1564},{"id":1563},"medium-address-in-audit",[1565],{"type":49,"value":1566},"Medium (Address in Audit)",{"type":44,"tag":71,"props":1568,"children":1569},{},[1570],{"type":44,"tag":75,"props":1571,"children":1572},{},[1573],{"type":49,"value":1574},"Bad randomness (manipulation possible but limited impact)",{"type":44,"tag":484,"props":1576,"children":1577},{},[],{"type":44,"tag":52,"props":1579,"children":1581},{"id":1580},"_8-testing-recommendations",[1582],{"type":49,"value":1583},"8. Testing Recommendations",{"type":44,"tag":112,"props":1585,"children":1587},{"id":1586},"fuzz-testing",[1588],{"type":49,"value":1589},"Fuzz Testing",{"type":44,"tag":146,"props":1591,"children":1593},{"className":148,"code":1592,"language":150,"meta":151,"style":151},"\u002F\u002F Use test-fuzz for property-based testing\n#[cfg(test)]\nmod tests {\n    use test_fuzz::test_fuzz;\n\n    #[test_fuzz]\n    fn fuzz_transfer(from: AccountId, to: AccountId, amount: u128) {\n        \u002F\u002F Should never panic\n        let _ = Pallet::transfer(from, to, amount);\n    }\n\n    #[test_fuzz]\n    fn fuzz_no_panics(call: Call) {\n        \u002F\u002F No dispatchable should panic\n        let _ = call.dispatch(origin);\n    }\n}\n",[1594],{"type":44,"tag":133,"props":1595,"children":1596},{"__ignoreMap":151},[1597,1605,1613,1621,1629,1636,1644,1652,1660,1668,1675,1682,1689,1697,1705,1713,1720],{"type":44,"tag":157,"props":1598,"children":1599},{"class":159,"line":160},[1600],{"type":44,"tag":157,"props":1601,"children":1602},{},[1603],{"type":49,"value":1604},"\u002F\u002F Use test-fuzz for property-based testing\n",{"type":44,"tag":157,"props":1606,"children":1607},{"class":159,"line":169},[1608],{"type":44,"tag":157,"props":1609,"children":1610},{},[1611],{"type":49,"value":1612},"#[cfg(test)]\n",{"type":44,"tag":157,"props":1614,"children":1615},{"class":159,"line":178},[1616],{"type":44,"tag":157,"props":1617,"children":1618},{},[1619],{"type":49,"value":1620},"mod tests {\n",{"type":44,"tag":157,"props":1622,"children":1623},{"class":159,"line":187},[1624],{"type":44,"tag":157,"props":1625,"children":1626},{},[1627],{"type":49,"value":1628},"    use test_fuzz::test_fuzz;\n",{"type":44,"tag":157,"props":1630,"children":1631},{"class":159,"line":196},[1632],{"type":44,"tag":157,"props":1633,"children":1634},{"emptyLinePlaceholder":209},[1635],{"type":49,"value":212},{"type":44,"tag":157,"props":1637,"children":1638},{"class":159,"line":205},[1639],{"type":44,"tag":157,"props":1640,"children":1641},{},[1642],{"type":49,"value":1643},"    #[test_fuzz]\n",{"type":44,"tag":157,"props":1645,"children":1646},{"class":159,"line":215},[1647],{"type":44,"tag":157,"props":1648,"children":1649},{},[1650],{"type":49,"value":1651},"    fn fuzz_transfer(from: AccountId, to: AccountId, amount: u128) {\n",{"type":44,"tag":157,"props":1653,"children":1654},{"class":159,"line":224},[1655],{"type":44,"tag":157,"props":1656,"children":1657},{},[1658],{"type":49,"value":1659},"        \u002F\u002F Should never panic\n",{"type":44,"tag":157,"props":1661,"children":1662},{"class":159,"line":233},[1663],{"type":44,"tag":157,"props":1664,"children":1665},{},[1666],{"type":49,"value":1667},"        let _ = Pallet::transfer(from, to, amount);\n",{"type":44,"tag":157,"props":1669,"children":1670},{"class":159,"line":241},[1671],{"type":44,"tag":157,"props":1672,"children":1673},{},[1674],{"type":49,"value":283},{"type":44,"tag":157,"props":1676,"children":1677},{"class":159,"line":250},[1678],{"type":44,"tag":157,"props":1679,"children":1680},{"emptyLinePlaceholder":209},[1681],{"type":49,"value":212},{"type":44,"tag":157,"props":1683,"children":1684},{"class":159,"line":259},[1685],{"type":44,"tag":157,"props":1686,"children":1687},{},[1688],{"type":49,"value":1643},{"type":44,"tag":157,"props":1690,"children":1691},{"class":159,"line":268},[1692],{"type":44,"tag":157,"props":1693,"children":1694},{},[1695],{"type":49,"value":1696},"    fn fuzz_no_panics(call: Call) {\n",{"type":44,"tag":157,"props":1698,"children":1699},{"class":159,"line":277},[1700],{"type":44,"tag":157,"props":1701,"children":1702},{},[1703],{"type":49,"value":1704},"        \u002F\u002F No dispatchable should panic\n",{"type":44,"tag":157,"props":1706,"children":1707},{"class":159,"line":286},[1708],{"type":44,"tag":157,"props":1709,"children":1710},{},[1711],{"type":49,"value":1712},"        let _ = call.dispatch(origin);\n",{"type":44,"tag":157,"props":1714,"children":1715},{"class":159,"line":295},[1716],{"type":44,"tag":157,"props":1717,"children":1718},{},[1719],{"type":49,"value":283},{"type":44,"tag":157,"props":1721,"children":1722},{"class":159,"line":303},[1723],{"type":44,"tag":157,"props":1724,"children":1725},{},[1726],{"type":49,"value":292},{"type":44,"tag":112,"props":1728,"children":1730},{"id":1729},"benchmarking",[1731],{"type":49,"value":1732},"Benchmarking",{"type":44,"tag":146,"props":1734,"children":1736},{"className":1032,"code":1735,"language":1034,"meta":151,"style":151},"# Run benchmarks to generate weights\ncargo build --release --features runtime-benchmarks\n.\u002Ftarget\u002Frelease\u002Fnode benchmark pallet \\\n    --chain dev \\\n    --pallet pallet_example \\\n    --extrinsic \"*\" \\\n    --steps 50 \\\n    --repeat 20\n",[1737],{"type":44,"tag":133,"props":1738,"children":1739},{"__ignoreMap":151},[1740,1748,1776,1800,1817,1834,1858,1876],{"type":44,"tag":157,"props":1741,"children":1742},{"class":159,"line":160},[1743],{"type":44,"tag":157,"props":1744,"children":1745},{"style":1044},[1746],{"type":49,"value":1747},"# Run benchmarks to generate weights\n",{"type":44,"tag":157,"props":1749,"children":1750},{"class":159,"line":169},[1751,1756,1761,1766,1771],{"type":44,"tag":157,"props":1752,"children":1753},{"style":1053},[1754],{"type":49,"value":1755},"cargo",{"type":44,"tag":157,"props":1757,"children":1758},{"style":1065},[1759],{"type":49,"value":1760}," build",{"type":44,"tag":157,"props":1762,"children":1763},{"style":1065},[1764],{"type":49,"value":1765}," --release",{"type":44,"tag":157,"props":1767,"children":1768},{"style":1065},[1769],{"type":49,"value":1770}," --features",{"type":44,"tag":157,"props":1772,"children":1773},{"style":1065},[1774],{"type":49,"value":1775}," runtime-benchmarks\n",{"type":44,"tag":157,"props":1777,"children":1778},{"class":159,"line":178},[1779,1784,1789,1794],{"type":44,"tag":157,"props":1780,"children":1781},{"style":1053},[1782],{"type":49,"value":1783},".\u002Ftarget\u002Frelease\u002Fnode",{"type":44,"tag":157,"props":1785,"children":1786},{"style":1065},[1787],{"type":49,"value":1788}," benchmark",{"type":44,"tag":157,"props":1790,"children":1791},{"style":1065},[1792],{"type":49,"value":1793}," pallet",{"type":44,"tag":157,"props":1795,"children":1797},{"style":1796},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[1798],{"type":49,"value":1799}," \\\n",{"type":44,"tag":157,"props":1801,"children":1802},{"class":159,"line":187},[1803,1808,1813],{"type":44,"tag":157,"props":1804,"children":1805},{"style":1065},[1806],{"type":49,"value":1807},"    --chain",{"type":44,"tag":157,"props":1809,"children":1810},{"style":1065},[1811],{"type":49,"value":1812}," dev",{"type":44,"tag":157,"props":1814,"children":1815},{"style":1796},[1816],{"type":49,"value":1799},{"type":44,"tag":157,"props":1818,"children":1819},{"class":159,"line":196},[1820,1825,1830],{"type":44,"tag":157,"props":1821,"children":1822},{"style":1065},[1823],{"type":49,"value":1824},"    --pallet",{"type":44,"tag":157,"props":1826,"children":1827},{"style":1065},[1828],{"type":49,"value":1829}," pallet_example",{"type":44,"tag":157,"props":1831,"children":1832},{"style":1796},[1833],{"type":49,"value":1799},{"type":44,"tag":157,"props":1835,"children":1836},{"class":159,"line":205},[1837,1842,1846,1850,1854],{"type":44,"tag":157,"props":1838,"children":1839},{"style":1065},[1840],{"type":49,"value":1841},"    --extrinsic",{"type":44,"tag":157,"props":1843,"children":1844},{"style":1059},[1845],{"type":49,"value":1062},{"type":44,"tag":157,"props":1847,"children":1848},{"style":1065},[1849],{"type":49,"value":622},{"type":44,"tag":157,"props":1851,"children":1852},{"style":1059},[1853],{"type":49,"value":1073},{"type":44,"tag":157,"props":1855,"children":1856},{"style":1796},[1857],{"type":49,"value":1799},{"type":44,"tag":157,"props":1859,"children":1860},{"class":159,"line":215},[1861,1866,1872],{"type":44,"tag":157,"props":1862,"children":1863},{"style":1065},[1864],{"type":49,"value":1865},"    --steps",{"type":44,"tag":157,"props":1867,"children":1869},{"style":1868},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[1870],{"type":49,"value":1871}," 50",{"type":44,"tag":157,"props":1873,"children":1874},{"style":1796},[1875],{"type":49,"value":1799},{"type":44,"tag":157,"props":1877,"children":1878},{"class":159,"line":224},[1879,1884],{"type":44,"tag":157,"props":1880,"children":1881},{"style":1065},[1882],{"type":49,"value":1883},"    --repeat",{"type":44,"tag":157,"props":1885,"children":1886},{"style":1868},[1887],{"type":49,"value":1888}," 20\n",{"type":44,"tag":112,"props":1890,"children":1891},{"id":480},[1892],{"type":49,"value":480},{"type":44,"tag":146,"props":1894,"children":1896},{"className":1032,"code":1895,"language":1034,"meta":151,"style":151},"# Test runtime upgrades\ncargo build --release --features try-runtime\ntry-runtime --runtime .\u002Ftarget\u002Frelease\u002Fwbuild\u002Fruntime.wasm \\\n    on-runtime-upgrade live --uri wss:\u002F\u002Frpc.polkadot.io\n",[1897],{"type":44,"tag":133,"props":1898,"children":1899},{"__ignoreMap":151},[1900,1908,1932,1953],{"type":44,"tag":157,"props":1901,"children":1902},{"class":159,"line":160},[1903],{"type":44,"tag":157,"props":1904,"children":1905},{"style":1044},[1906],{"type":49,"value":1907},"# Test runtime upgrades\n",{"type":44,"tag":157,"props":1909,"children":1910},{"class":159,"line":169},[1911,1915,1919,1923,1927],{"type":44,"tag":157,"props":1912,"children":1913},{"style":1053},[1914],{"type":49,"value":1755},{"type":44,"tag":157,"props":1916,"children":1917},{"style":1065},[1918],{"type":49,"value":1760},{"type":44,"tag":157,"props":1920,"children":1921},{"style":1065},[1922],{"type":49,"value":1765},{"type":44,"tag":157,"props":1924,"children":1925},{"style":1065},[1926],{"type":49,"value":1770},{"type":44,"tag":157,"props":1928,"children":1929},{"style":1065},[1930],{"type":49,"value":1931}," try-runtime\n",{"type":44,"tag":157,"props":1933,"children":1934},{"class":159,"line":178},[1935,1939,1944,1949],{"type":44,"tag":157,"props":1936,"children":1937},{"style":1053},[1938],{"type":49,"value":480},{"type":44,"tag":157,"props":1940,"children":1941},{"style":1065},[1942],{"type":49,"value":1943}," --runtime",{"type":44,"tag":157,"props":1945,"children":1946},{"style":1065},[1947],{"type":49,"value":1948}," .\u002Ftarget\u002Frelease\u002Fwbuild\u002Fruntime.wasm",{"type":44,"tag":157,"props":1950,"children":1951},{"style":1796},[1952],{"type":49,"value":1799},{"type":44,"tag":157,"props":1954,"children":1955},{"class":159,"line":187},[1956,1961,1966,1971],{"type":44,"tag":157,"props":1957,"children":1958},{"style":1065},[1959],{"type":49,"value":1960},"    on-runtime-upgrade",{"type":44,"tag":157,"props":1962,"children":1963},{"style":1065},[1964],{"type":49,"value":1965}," live",{"type":44,"tag":157,"props":1967,"children":1968},{"style":1065},[1969],{"type":49,"value":1970}," --uri",{"type":44,"tag":157,"props":1972,"children":1973},{"style":1065},[1974],{"type":49,"value":1975}," wss:\u002F\u002Frpc.polkadot.io\n",{"type":44,"tag":484,"props":1977,"children":1978},{},[],{"type":44,"tag":52,"props":1980,"children":1982},{"id":1981},"_9-additional-resources",[1983],{"type":49,"value":1984},"9. Additional Resources",{"type":44,"tag":71,"props":1986,"children":1987},{},[1988,2003,2019,2034,2048],{"type":44,"tag":75,"props":1989,"children":1990},{},[1991,1996,1997],{"type":44,"tag":125,"props":1992,"children":1993},{},[1994],{"type":49,"value":1995},"Building Secure Contracts",{"type":49,"value":131},{"type":44,"tag":133,"props":1998,"children":2000},{"className":1999},[],[2001],{"type":49,"value":2002},"building-secure-contracts\u002Fnot-so-smart-contracts\u002Fsubstrate\u002F",{"type":44,"tag":75,"props":2004,"children":2005},{},[2006,2011,2012],{"type":44,"tag":125,"props":2007,"children":2008},{},[2009],{"type":49,"value":2010},"Substrate Documentation",{"type":49,"value":131},{"type":44,"tag":567,"props":2013,"children":2017},{"href":2014,"rel":2015},"https:\u002F\u002Fdocs.substrate.io\u002F",[2016],"nofollow",[2018],{"type":49,"value":2014},{"type":44,"tag":75,"props":2020,"children":2021},{},[2022,2027,2028],{"type":44,"tag":125,"props":2023,"children":2024},{},[2025],{"type":49,"value":2026},"FRAME Documentation",{"type":49,"value":131},{"type":44,"tag":567,"props":2029,"children":2032},{"href":2030,"rel":2031},"https:\u002F\u002Fparitytech.github.io\u002Fsubstrate\u002Fmaster\u002Fframe_support\u002F",[2016],[2033],{"type":49,"value":2030},{"type":44,"tag":75,"props":2035,"children":2036},{},[2037,2041,2042],{"type":44,"tag":125,"props":2038,"children":2039},{},[2040],{"type":49,"value":460},{"type":49,"value":131},{"type":44,"tag":567,"props":2043,"children":2046},{"href":2044,"rel":2045},"https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Ftest-fuzz",[2016],[2047],{"type":49,"value":2044},{"type":44,"tag":75,"props":2049,"children":2050},{},[2051,2056,2057],{"type":44,"tag":125,"props":2052,"children":2053},{},[2054],{"type":49,"value":2055},"Substrate StackExchange",{"type":49,"value":131},{"type":44,"tag":567,"props":2058,"children":2061},{"href":2059,"rel":2060},"https:\u002F\u002Fsubstrate.stackexchange.com\u002F",[2016],[2062],{"type":49,"value":2059},{"type":44,"tag":484,"props":2064,"children":2065},{},[],{"type":44,"tag":52,"props":2067,"children":2069},{"id":2068},"_10-quick-reference-checklist",[2070],{"type":49,"value":2071},"10. Quick Reference Checklist",{"type":44,"tag":59,"props":2073,"children":2074},{},[2075],{"type":49,"value":2076},"Before completing Substrate pallet audit:",{"type":44,"tag":59,"props":2078,"children":2079},{},[2080,2085],{"type":44,"tag":125,"props":2081,"children":2082},{},[2083],{"type":49,"value":2084},"Arithmetic Safety (CRITICAL)",{"type":49,"value":2086},":",{"type":44,"tag":71,"props":2088,"children":2090},{"className":2089},[974],[2091,2125,2145],{"type":44,"tag":75,"props":2092,"children":2094},{"className":2093},[979],[2095,2098,2100,2105,2106,2111,2112,2117,2118,2123],{"type":44,"tag":982,"props":2096,"children":2097},{"disabled":209,"type":984},[],{"type":49,"value":2099}," No direct ",{"type":44,"tag":133,"props":2101,"children":2103},{"className":2102},[],[2104],{"type":49,"value":607},{"type":49,"value":609},{"type":44,"tag":133,"props":2107,"children":2109},{"className":2108},[],[2110],{"type":49,"value":615},{"type":49,"value":609},{"type":44,"tag":133,"props":2113,"children":2115},{"className":2114},[],[2116],{"type":49,"value":622},{"type":49,"value":609},{"type":44,"tag":133,"props":2119,"children":2121},{"className":2120},[],[2122],{"type":49,"value":629},{"type":49,"value":2124}," operators in dispatchables",{"type":44,"tag":75,"props":2126,"children":2128},{"className":2127},[979],[2129,2132,2134,2139,2140],{"type":44,"tag":982,"props":2130,"children":2131},{"disabled":209,"type":984},[],{"type":49,"value":2133}," All arithmetic uses ",{"type":44,"tag":133,"props":2135,"children":2137},{"className":2136},[],[2138],{"type":49,"value":642},{"type":49,"value":644},{"type":44,"tag":133,"props":2141,"children":2143},{"className":2142},[],[2144],{"type":49,"value":650},{"type":44,"tag":75,"props":2146,"children":2148},{"className":2147},[979],[2149,2152,2154,2160],{"type":44,"tag":982,"props":2150,"children":2151},{"disabled":209,"type":984},[],{"type":49,"value":2153}," Type conversions use ",{"type":44,"tag":133,"props":2155,"children":2157},{"className":2156},[],[2158],{"type":49,"value":2159},"try_into()",{"type":49,"value":2161}," with error handling",{"type":44,"tag":59,"props":2163,"children":2164},{},[2165,2170],{"type":44,"tag":125,"props":2166,"children":2167},{},[2168],{"type":49,"value":2169},"Panic Prevention (CRITICAL)",{"type":49,"value":2086},{"type":44,"tag":71,"props":2172,"children":2174},{"className":2173},[974],[2175,2197,2206,2220],{"type":44,"tag":75,"props":2176,"children":2178},{"className":2177},[979],[2179,2182,2184,2189,2190,2195],{"type":44,"tag":982,"props":2180,"children":2181},{"disabled":209,"type":984},[],{"type":49,"value":2183}," No ",{"type":44,"tag":133,"props":2185,"children":2187},{"className":2186},[],[2188],{"type":49,"value":686},{"type":49,"value":644},{"type":44,"tag":133,"props":2191,"children":2193},{"className":2192},[],[2194],{"type":49,"value":693},{"type":49,"value":2196}," in dispatchables",{"type":44,"tag":75,"props":2198,"children":2200},{"className":2199},[979],[2201,2204],{"type":44,"tag":982,"props":2202,"children":2203},{"disabled":209,"type":984},[],{"type":49,"value":2205}," No direct array\u002Fslice indexing without bounds check",{"type":44,"tag":75,"props":2207,"children":2209},{"className":2208},[979],[2210,2213,2215],{"type":44,"tag":982,"props":2211,"children":2212},{"disabled":209,"type":984},[],{"type":49,"value":2214}," All user inputs validated with ",{"type":44,"tag":133,"props":2216,"children":2218},{"className":2217},[],[2219],{"type":49,"value":706},{"type":44,"tag":75,"props":2221,"children":2223},{"className":2222},[979],[2224,2227],{"type":44,"tag":982,"props":2225,"children":2226},{"disabled":209,"type":984},[],{"type":49,"value":2228}," Division operations check for zero divisor",{"type":44,"tag":59,"props":2230,"children":2231},{},[2232,2237],{"type":44,"tag":125,"props":2233,"children":2234},{},[2235],{"type":49,"value":2236},"Weights & DoS (CRITICAL)",{"type":49,"value":2086},{"type":44,"tag":71,"props":2239,"children":2241},{"className":2240},[974],[2242,2251,2260,2269],{"type":44,"tag":75,"props":2243,"children":2245},{"className":2244},[979],[2246,2249],{"type":44,"tag":982,"props":2247,"children":2248},{"disabled":209,"type":984},[],{"type":49,"value":2250}," Weights proportional to computational cost",{"type":44,"tag":75,"props":2252,"children":2254},{"className":2253},[979],[2255,2258],{"type":44,"tag":982,"props":2256,"children":2257},{"disabled":209,"type":984},[],{"type":49,"value":2259}," Input parameters have maximum bounds",{"type":44,"tag":75,"props":2261,"children":2263},{"className":2262},[979],[2264,2267],{"type":44,"tag":982,"props":2265,"children":2266},{"disabled":209,"type":984},[],{"type":49,"value":2268}," Benchmarking used to determine weights",{"type":44,"tag":75,"props":2270,"children":2272},{"className":2271},[979],[2273,2276],{"type":44,"tag":982,"props":2274,"children":2275},{"disabled":209,"type":984},[],{"type":49,"value":2277}," No free (zero-weight) expensive operations",{"type":44,"tag":59,"props":2279,"children":2280},{},[2281,2286],{"type":44,"tag":125,"props":2282,"children":2283},{},[2284],{"type":49,"value":2285},"Access Control (CRITICAL)",{"type":49,"value":2086},{"type":44,"tag":71,"props":2288,"children":2290},{"className":2289},[974],[2291,2307,2323,2332],{"type":44,"tag":75,"props":2292,"children":2294},{"className":2293},[979],[2295,2298,2300,2305],{"type":44,"tag":982,"props":2296,"children":2297},{"disabled":209,"type":984},[],{"type":49,"value":2299}," Privileged operations use ",{"type":44,"tag":133,"props":2301,"children":2303},{"className":2302},[],[2304],{"type":49,"value":884},{"type":49,"value":2306}," or custom origins",{"type":44,"tag":75,"props":2308,"children":2310},{"className":2309},[979],[2311,2314,2316,2321],{"type":44,"tag":982,"props":2312,"children":2313},{"disabled":209,"type":984},[],{"type":49,"value":2315}," ",{"type":44,"tag":133,"props":2317,"children":2319},{"className":2318},[],[2320],{"type":49,"value":872},{"type":49,"value":2322}," only for user-level operations",{"type":44,"tag":75,"props":2324,"children":2326},{"className":2325},[979],[2327,2330],{"type":44,"tag":982,"props":2328,"children":2329},{"disabled":209,"type":984},[],{"type":49,"value":2331}," Origin types properly configured in runtime",{"type":44,"tag":75,"props":2333,"children":2335},{"className":2334},[979],[2336,2339],{"type":44,"tag":982,"props":2337,"children":2338},{"disabled":209,"type":984},[],{"type":49,"value":2340}," Sudo pallet removed before production",{"type":44,"tag":59,"props":2342,"children":2343},{},[2344,2349],{"type":44,"tag":125,"props":2345,"children":2346},{},[2347],{"type":49,"value":2348},"Storage Safety (HIGH)",{"type":49,"value":2086},{"type":44,"tag":71,"props":2351,"children":2353},{"className":2352},[974],[2354,2368,2377],{"type":44,"tag":75,"props":2355,"children":2357},{"className":2356},[979],[2358,2361,2363],{"type":44,"tag":982,"props":2359,"children":2360},{"disabled":209,"type":984},[],{"type":49,"value":2362}," Using Substrate v0.9.25+ OR manual ",{"type":44,"tag":133,"props":2364,"children":2366},{"className":2365},[],[2367],{"type":49,"value":767},{"type":44,"tag":75,"props":2369,"children":2371},{"className":2370},[979],[2372,2375],{"type":44,"tag":982,"props":2373,"children":2374},{"disabled":209,"type":984},[],{"type":49,"value":2376}," Validation before storage writes",{"type":44,"tag":75,"props":2378,"children":2380},{"className":2379},[979],[2381,2384],{"type":44,"tag":982,"props":2382,"children":2383},{"disabled":209,"type":984},[],{"type":49,"value":2385}," Events emitted after successful operations",{"type":44,"tag":59,"props":2387,"children":2388},{},[2389,2394],{"type":44,"tag":125,"props":2390,"children":2391},{},[2392],{"type":49,"value":2393},"Other (MEDIUM)",{"type":49,"value":2086},{"type":44,"tag":71,"props":2396,"children":2398},{"className":2397},[974],[2399,2408,2417,2426],{"type":44,"tag":75,"props":2400,"children":2402},{"className":2401},[979],[2403,2406],{"type":44,"tag":982,"props":2404,"children":2405},{"disabled":209,"type":984},[],{"type":49,"value":2407}," Unsigned transactions use signed alternative if possible",{"type":44,"tag":75,"props":2409,"children":2411},{"className":2410},[979],[2412,2415],{"type":44,"tag":982,"props":2413,"children":2414},{"disabled":209,"type":984},[],{"type":49,"value":2416}," If unsigned: proper validation, replay protection, authentication",{"type":44,"tag":75,"props":2418,"children":2420},{"className":2419},[979],[2421,2424],{"type":44,"tag":982,"props":2422,"children":2423},{"disabled":209,"type":984},[],{"type":49,"value":2425}," BABE randomness used (not RandomnessCollectiveFlip)",{"type":44,"tag":75,"props":2427,"children":2429},{"className":2428},[979],[2430,2433,2435,2440,2441],{"type":44,"tag":982,"props":2431,"children":2432},{"disabled":209,"type":984},[],{"type":49,"value":2434}," Randomness uses ",{"type":44,"tag":133,"props":2436,"children":2438},{"className":2437},[],[2439],{"type":49,"value":843},{"type":49,"value":845},{"type":44,"tag":133,"props":2442,"children":2444},{"className":2443},[],[2445],{"type":49,"value":851},{"type":44,"tag":59,"props":2447,"children":2448},{},[2449,2454],{"type":44,"tag":125,"props":2450,"children":2451},{},[2452],{"type":49,"value":2453},"Testing",{"type":49,"value":2086},{"type":44,"tag":71,"props":2456,"children":2458},{"className":2457},[974],[2459,2468,2477,2486],{"type":44,"tag":75,"props":2460,"children":2462},{"className":2461},[979],[2463,2466],{"type":44,"tag":982,"props":2464,"children":2465},{"disabled":209,"type":984},[],{"type":49,"value":2467}," Unit tests for all dispatchables",{"type":44,"tag":75,"props":2469,"children":2471},{"className":2470},[979],[2472,2475],{"type":44,"tag":982,"props":2473,"children":2474},{"disabled":209,"type":984},[],{"type":49,"value":2476}," Fuzz tests to find panics",{"type":44,"tag":75,"props":2478,"children":2480},{"className":2479},[979],[2481,2484],{"type":44,"tag":982,"props":2482,"children":2483},{"disabled":209,"type":984},[],{"type":49,"value":2485}," Benchmarks generated and verified",{"type":44,"tag":75,"props":2487,"children":2489},{"className":2488},[979],[2490,2493],{"type":44,"tag":982,"props":2491,"children":2492},{"disabled":209,"type":984},[],{"type":49,"value":1503},{"type":44,"tag":2495,"props":2496,"children":2497},"style",{},[2498],{"type":49,"value":2499},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":2501,"total":2650},[2502,2518,2528,2546,2557,2570,2582,2592,2605,2616,2628,2639],{"slug":2503,"name":2503,"fn":2504,"description":2505,"org":2506,"tags":2507,"stars":26,"repoUrl":27,"updatedAt":2517},"address-sanitizer","detect memory errors during fuzzing","AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C\u002FC++ code to find buffer overflows and use-after-free bugs.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2508,2511,2514,2515],{"name":2509,"slug":2510,"type":16},"C#","c",{"name":2512,"slug":2513,"type":16},"Debugging","debugging",{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},"testing","2026-07-17T06:05:14.925095",{"slug":2519,"name":2519,"fn":2520,"description":2521,"org":2522,"tags":2523,"stars":26,"repoUrl":27,"updatedAt":2527},"aflpp","perform multi-core fuzzing of C\u002FC++ projects","AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C\u002FC++ projects.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2524,2525,2526],{"name":2509,"slug":2510,"type":16},{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},"2026-07-17T06:05:12.433192",{"slug":2529,"name":2529,"fn":2530,"description":2531,"org":2532,"tags":2533,"stars":26,"repoUrl":27,"updatedAt":2545},"agentic-actions-auditor","audit GitHub Actions for security vulnerabilities","Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI\u002FCD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI\u002FCD pipeline security for prompt injection risks, or evaluating agentic action configurations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2534,2537,2540,2541,2544],{"name":2535,"slug":2536,"type":16},"Agents","agents",{"name":2538,"slug":2539,"type":16},"CI\u002FCD","ci-cd",{"name":24,"slug":25,"type":16},{"name":2542,"slug":2543,"type":16},"GitHub Actions","github-actions",{"name":14,"slug":15,"type":16},"2026-07-18T05:47:48.564744",{"slug":2547,"name":2547,"fn":2548,"description":2549,"org":2550,"tags":2551,"stars":26,"repoUrl":27,"updatedAt":2556},"algorand-vulnerability-scanner","scan Algorand smart contracts for vulnerabilities","Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL\u002FPyTeal).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2552,2553,2554,2555],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":21,"slug":22,"type":16},"2026-07-18T05:47:43.989063",{"slug":2558,"name":2558,"fn":2559,"description":2560,"org":2561,"tags":2562,"stars":26,"repoUrl":27,"updatedAt":2569},"ask-questions-if-underspecified","clarify requirements before implementation","Clarify requirements before implementing. Use when serious doubts arise.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2563,2566],{"name":2564,"slug":2565,"type":16},"Engineering","engineering",{"name":2567,"slug":2568,"type":16},"Productivity","productivity","2026-07-17T06:05:33.543262",{"slug":2571,"name":2571,"fn":2572,"description":2573,"org":2574,"tags":2575,"stars":26,"repoUrl":27,"updatedAt":2581},"atheris","fuzz Python code with Atheris","Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2576,2579,2580],{"name":2577,"slug":2578,"type":16},"Python","python",{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},"2026-07-17T06:05:14.575191",{"slug":2583,"name":2583,"fn":2584,"description":2585,"org":2586,"tags":2587,"stars":26,"repoUrl":27,"updatedAt":2591},"audit-augmentation","augment code graphs with audit findings","Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x binary-analysis graph exports. Maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and enables cross-referencing findings with pre-analysis data (blast radius, taint, etc.). Use when projecting SARIF results onto a code graph, overlaying weAudit annotations, importing binary graph findings, cross-referencing Semgrep, CodeQL, or binary-analysis findings with call graph data, or visualizing audit findings in the context of code structure.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2588,2589,2590],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},"2026-08-01T05:44:54.920542",{"slug":2593,"name":2593,"fn":2594,"description":2595,"org":2596,"tags":2597,"stars":26,"repoUrl":27,"updatedAt":2604},"audit-context-building","build architectural context for code analysis","Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2598,2601,2602,2603],{"name":2599,"slug":2600,"type":16},"Architecture","architecture",{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":2564,"slug":2565,"type":16},"2026-07-18T05:47:40.122449",{"slug":2606,"name":2606,"fn":2607,"description":2608,"org":2609,"tags":2610,"stars":26,"repoUrl":27,"updatedAt":2615},"audit-prep-assistant","prepare codebases for security audits","Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2611,2612,2613,2614],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":2564,"slug":2565,"type":16},{"name":14,"slug":15,"type":16},"2026-07-18T05:47:39.210985",{"slug":2617,"name":2617,"fn":2618,"description":2619,"org":2620,"tags":2621,"stars":26,"repoUrl":27,"updatedAt":2627},"burpsuite-project-parser","parse Burp Suite project files","Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2622,2623,2626],{"name":18,"slug":19,"type":16},{"name":2624,"slug":2625,"type":16},"CLI","cli",{"name":14,"slug":15,"type":16},"2026-07-17T06:05:33.198077",{"slug":2629,"name":2629,"fn":2630,"description":2631,"org":2632,"tags":2633,"stars":26,"repoUrl":27,"updatedAt":2638},"c-review","audit C and C++ code","Performs comprehensive C\u002FC++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C\u002FC++ applications, reviewing daemons or services for memory safety, or hunting integer overflow \u002F use-after-free \u002F race conditions in userspace code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2634,2635,2636,2637],{"name":18,"slug":19,"type":16},{"name":2509,"slug":2510,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},"2026-07-17T06:05:11.333374",{"slug":2640,"name":2640,"fn":2641,"description":2642,"org":2643,"tags":2644,"stars":26,"repoUrl":27,"updatedAt":2649},"cairo-vulnerability-scanner","scan Cairo and StarkNet contracts for vulnerabilities","Scans Cairo\u002FStarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2645,2646,2647,2648],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":21,"slug":22,"type":16},"2026-07-18T05:47:42.84568",111,{"items":2652,"total":2698},[2653,2660,2666,2674,2681,2686,2692],{"slug":2503,"name":2503,"fn":2504,"description":2505,"org":2654,"tags":2655,"stars":26,"repoUrl":27,"updatedAt":2517},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2656,2657,2658,2659],{"name":2509,"slug":2510,"type":16},{"name":2512,"slug":2513,"type":16},{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},{"slug":2519,"name":2519,"fn":2520,"description":2521,"org":2661,"tags":2662,"stars":26,"repoUrl":27,"updatedAt":2527},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2663,2664,2665],{"name":2509,"slug":2510,"type":16},{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},{"slug":2529,"name":2529,"fn":2530,"description":2531,"org":2667,"tags":2668,"stars":26,"repoUrl":27,"updatedAt":2545},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2669,2670,2671,2672,2673],{"name":2535,"slug":2536,"type":16},{"name":2538,"slug":2539,"type":16},{"name":24,"slug":25,"type":16},{"name":2542,"slug":2543,"type":16},{"name":14,"slug":15,"type":16},{"slug":2547,"name":2547,"fn":2548,"description":2549,"org":2675,"tags":2676,"stars":26,"repoUrl":27,"updatedAt":2556},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2677,2678,2679,2680],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":21,"slug":22,"type":16},{"slug":2558,"name":2558,"fn":2559,"description":2560,"org":2682,"tags":2683,"stars":26,"repoUrl":27,"updatedAt":2569},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2684,2685],{"name":2564,"slug":2565,"type":16},{"name":2567,"slug":2568,"type":16},{"slug":2571,"name":2571,"fn":2572,"description":2573,"org":2687,"tags":2688,"stars":26,"repoUrl":27,"updatedAt":2581},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2689,2690,2691],{"name":2577,"slug":2578,"type":16},{"name":14,"slug":15,"type":16},{"name":2453,"slug":2516,"type":16},{"slug":2583,"name":2583,"fn":2584,"description":2585,"org":2693,"tags":2694,"stars":26,"repoUrl":27,"updatedAt":2591},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2695,2696,2697],{"name":18,"slug":19,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},77]