aderyn

Analyze Solidity smart contracts for vulnerabilities and code quality issues.

4|1|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/hairyf/blockchain-skills --skill aderyn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aderyn
Source: https://github.com/hairyf/blockchain-skills/tree/main/skills/aderyn
Command: npx skills add https://github.com/hairyf/blockchain-skills --skill aderyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify vulnerabilities and code-quality issues in Solidity smart contracts efficiently, improving code security and maintainability.

Core Features & Use Cases

  • Static Analysis: Detects common vulnerabilities and best-practice violations.
  • Configuration: Supports custom configurations for targeted analysis.
  • Reporting: Generates reports in various formats (Markdown, JSON, SARIF) for easy integration into workflows.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan smart contract code for critical vulnerabilities before deployment.

Quick Start

Use the aderyn skill to analyze the smart contracts in the current directory and output a markdown report.

Frequently Asked Questions about aderyn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis on Solidity smart contracts to detect vulnerabilities?

You can run static analysis on Solidity smart contracts by using this Skill to scan your project directory and generate a vulnerability report. It leverages the Aderyn tool to detect security issues and code quality violations.

Can I generate SARIF reports for Solidity static analysis to integrate into my CI/CD pipeline?

Yes, you can generate SARIF reports for Solidity static analysis to integrate into your CI/CD pipeline. The Skill also supports Markdown and JSON output formats for automated vulnerability scanning workflows.

How do I configure custom rules for Solidity static analysis?

You can configure custom rules for Solidity static analysis by using an `aderyn.toml` configuration file. This allows you to set up targeted analysis parameters for your smart contract vulnerability detection.

What types of vulnerabilities can static analysis detect in Solidity code?

Static analysis in Solidity code detects common vulnerabilities and best-practice violations. It performs code scanning to identify security flaws and maintainability issues before smart contract deployment.

Do I need any dependencies to perform static analysis on Solidity smart contracts?

No external dependencies are required to perform static analysis on Solidity smart contracts with this Skill. It operates independently to scan your codebase and generate vulnerability reports.