Blockchain Security Auditor

Audits Solidity smart contracts for vulnerabilities and produces severity-classified audit reports with exploit proofs.

2|Updated May 21, 2026
One-click install
npx skills add https://github.com/tcvdog/agency-agents-hermes --skill blockchain-security-auditor-tcvdog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Blockchain Security Auditor
Source: https://github.com/tcvdog/agency-agents-hermes/tree/main/specialized/blockchain-security-auditor
Command: npx skills add https://github.com/tcvdog/agency-agents-hermes --skill blockchain-security-auditor-tcvdog

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Smart contract bugs can drain millions in user funds, and automated scanners alone miss logic flaws and economic exploits. This Skill performs systematic security audits of Solidity contracts, combining manual review, static analysis, and exploit modeling to find vulnerabilities before attackers do. ## Core Features & Use Cases - Vulnerability Detection: Identifies reentrancy, oracle manipulation, access control flaws, flash loan attacks, and economic exploits with proof-of-concept Foundry tests for every finding. - Automated Tooling Integration: Runs Slither, Mythril, and Echidna as a first pass, then validates results through manual line-by-line review. - Professional Audit Reports: Generates reports with Critical/High/Medium/Low/Informational severity classifications, impact estimates, and actionable remediation steps. - Use Case: Before deploying a DeFi lending protocol, run a full audit to catch a spot-price oracle manipulation vector, receive a Foundry test reproducing the flash loan exploit, and get the exact Chainlink-based fix with staleness validation. ## Quick Start Audit the attached Solidity contracts for reentrancy, oracle manipulation, and access control vulnerabilities, then produce a severity-classified audit report with proof-of-concept exploits.

Frequently Asked Questions about Blockchain Security Auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solidity smart contract for vulnerabilities?▼

Start with automated tools like Slither and Mythril for a first pass, then perform manual line-by-line review focusing on state changes, external calls, and access control. Every finding should include a proof-of-concept exploit, such as a Foundry test, demonstrating concrete impact.

What tools are used for smart contract security analysis?▼

Slither handles static analysis with high-confidence detectors, Mythril performs symbolic execution, and Echidna or Foundry run property-based fuzz testing against protocol invariants. Automated tools catch roughly 30% of real bugs, so manual review remains essential.

How are smart contract audit findings classified by severity?▼

Critical means direct loss of user funds exploitable without privileges; High covers conditional fund loss or privilege escalation; Medium includes griefing and temporary DoS; Low covers best-practice deviations; Informational covers code quality and documentation gaps.

Can automated tools like Slither replace manual smart contract review?▼

No. Static analysis tools miss logic bugs, economic exploits, and protocol-level vulnerabilities. Manual review is required to trace token flows, verify business logic invariants, and analyze composability risks across external protocol dependencies.

How do I prevent oracle manipulation in DeFi lending contracts?▼

Avoid spot prices from DEX reserves, which attackers skew with flash swaps. Use Chainlink price feeds or TWAP oracles, and validate responses by checking price positivity, staleness against a maximum age, and round completeness.