Cosmos Vulnerability Scanner

Purpose

Scan Cosmos SDK modules and CosmWasm contracts for vulnerabilities that cause chain halts, consensus failures, or fund loss. Spawns parallel scanning agents — each specializing in a vulnerability category — that return findings to the main skill, which then writes them as individual markdown files to an output directory.

Output directory: defaults to .bughunt_cosmos/. If the user specifies a different directory in their prompt, use that instead.

When to Use

• Auditing Cosmos SDK modules (custom x/ modules)
• Reviewing CosmWasm smart contracts
• Pre-launch security assessment of Cosmos chains
• Investigating chain halt incidents

When NOT to Use