kadenzipfelkadenzipfelCommunityยท1 Agent Skills Included

scv-scan

Automated Solidity smart contract security vulnerability audits

Audits Solidity smart contract codebases for 36 known vulnerability types, from reentrancy to access control flaws. Combines fast keyword scanning with deep semantic code review to catch logic bugs that simple pattern matching misses. Validates every finding against detailed reference files to eliminate false positives. Outputs a severity-ranked report with code snippets and concrete fix recommendations.
npx skills add kadenzipfel/scv-scan --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install scv-scan?โ–ผ

Run `npx skills add kadenzipfel/scv-scan --all -g -y` in your terminal to install the skill globally.

How to audit Solidity contracts for vulnerabilities?โ–ผ

Run the skill inside your project and it sweeps your code for 36 vulnerability classes, validates each finding against reference heuristics, and writes a severity-ranked report to scv-scan.md.

What vulnerabilities does scv-scan detect?โ–ผ

It covers 36 classes including reentrancy, tx.origin authorization, signature replay, precision loss, arbitrary storage writes, and access control flaws.

Does scv-scan reduce false positives?โ–ผ

Yes. Every candidate finding is checked against documented false-positive conditions in the reference files before it reaches the final report.

Do I need security expertise to use scv-scan?โ–ผ

No. The skill guides the audit workflow automatically and explains each confirmed finding with plain descriptions and fix recommendations.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’