skills.rest
Ayoub-ouederni
Ayoub-ouederniCOMMUNITY
Explore all skills by this author →
GitHub

audit

Audit Solidity smart contracts against security checklists, SWC classifications, and ERC20 edge cases.

Updated Apr 3, 2026
Search Tags:#security audit#smart contract#solidity#reentrancy#defi#erc20#swc
One-click install
npx skills add https://github.com/Ayoub-ouederni/SENTINEL --skill audit-ayoub-ouederni
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/Ayoub-ouederni/SENTINEL/tree/main/.claude/skills/audit
Command: npx skills add https://github.com/Ayoub-ouederni/SENTINEL --skill audit-ayoub-ouederni

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Smart contract vulnerabilities can lead to irreversible loss of funds, yet manual security reviews are inconsistent and easy to skip critical checks. This Skill enforces a systematic, checklist-driven audit process so no common vulnerability class is overlooked. ## Core Features & Use Cases - Systematic Checklist Audit: Works through 100+ checks covering variables, functions, modifiers, code patterns, external calls, events, and contract-level concerns. - SWC Vulnerability Scan: Maps findings to the Smart Contract Weakness Classification registry (SWC-100 through SWC-136) for standardized reporting. - Weird ERC20 Edge Cases: Checks token interactions against known problematic behaviors like fee-on-transfer, rebasing, missing return values, and approval race conditions. - Use Case: Before deploying a DeFi vault contract, run the audit to receive a structured report with severity-classified findings, file:line references, SWC mappings, and specific remediation advice. ## Quick Start Ask the AI to audit a specific contract, for example: run a security audit on StakingVault.sol and report all findings by severity.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solidity smart contract for vulnerabilities?▼

Provide the contract file or scope description as the argument, and the audit walks through a systematic checklist covering variables, functions, code patterns, external calls, and events. Findings are classified by severity with file:line locations and remediation advice.

What vulnerability types does a Solidity security audit check?▼

The audit checks all SWC registry entries including reentrancy, integer overflow, unchecked call returns, tx.origin authorization, weak randomness, and signature replay. It also covers DeFi-specific risks like oracle manipulation, flash loan attacks, and first depositor attacks.

Does the audit handle non-standard ERC20 token behaviors?▼

Yes, it checks interactions against known weird ERC20 behaviors including missing return values like USDT, fee-on-transfer tokens, rebasing tokens, approval race conditions, pausable tokens, and blocklists. Each token interaction is verified against this edge case list.

What output format does the smart contract audit produce?▼

The audit produces a structured report with Critical, High, Medium, and Low findings, each including severity, location, SWC mapping, description, impact, and recommendation. It also includes a checklist summary and gas optimization opportunities.

When is a checklist audit not enough for contract security?▼

A static checklist audit cannot replace dynamic testing like fuzzing, formal verification, or invariant testing for complex protocols. It also depends on stated assumptions, such as trusted oracles, which should be validated separately.

Related Skills

Explore More Software Engineering Skills→
pashovpashov
1.1k

fizz

Generate and run fuzz tests for Solidity smart contracts using Echidna and Medusa.

Community
Advanced
javiarmestojaviarmesto

skill-diagnostics

Audit Business Central AL workspaces against declared coding contracts.

Community
Advanced
fjor1025fjor1025

secure-workflow-guide

Guide smart contract development through a 5-step security workflow with Slither.

Community
Advanced
LAF-USLAF-US

building-mcp-server-on-cloudflare

Create and secure an MCP server on Cloudflare Workers with OAuth.

Official
Advanced