aderyn

Analyze Solidity smart contracts for vulnerabilities and code quality issues.

4|1|Updated Jan 30, 2026

Search Tags:#static analysis #security #auditing #smart contracts #vulnerability detection #solidity

Ready to run

npx skills add https://github.com/hairyf/blockchain-skills --skill aderyn

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aderyn
Source: https://github.com/hairyf/blockchain-skills/tree/main/skills/aderyn
Command: npx skills add https://github.com/hairyf/blockchain-skills --skill aderyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify vulnerabilities and code-quality issues in Solidity smart contracts efficiently, improving code security and maintainability.

Core Features & Use Cases

Static Analysis: Detects common vulnerabilities and best-practice violations.
Configuration: Supports custom configurations for targeted analysis.
Reporting: Generates reports in various formats (Markdown, JSON, SARIF) for easy integration into workflows.
Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan smart contract code for critical vulnerabilities before deployment.

Quick Start

Use the aderyn skill to analyze the smart contracts in the current directory and output a markdown report.

Frequently Asked Questions about aderyn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run static analysis on Solidity smart contracts to detect vulnerabilities?▼

You can run static analysis on Solidity smart contracts by using this Skill to scan your project directory and generate a vulnerability report. It leverages the Aderyn tool to detect security issues and code quality violations.

Can I generate SARIF reports for Solidity static analysis to integrate into my CI/CD pipeline?▼

Yes, you can generate SARIF reports for Solidity static analysis to integrate into your CI/CD pipeline. The Skill also supports Markdown and JSON output formats for automated vulnerability scanning workflows.

How do I configure custom rules for Solidity static analysis?▼

You can configure custom rules for Solidity static analysis by using an `aderyn.toml` configuration file. This allows you to set up targeted analysis parameters for your smart contract vulnerability detection.

What types of vulnerabilities can static analysis detect in Solidity code?▼

Static analysis in Solidity code detects common vulnerabilities and best-practice violations. It performs code scanning to identify security flaws and maintainability issues before smart contract deployment.

Do I need any dependencies to perform static analysis on Solidity smart contracts?▼

No external dependencies are required to perform static analysis on Solidity smart contracts with this Skill. It operates independently to scan your codebase and generate vulnerability reports.