claude-tob-review

Analyze Solidity contracts for security vulnerabilities using Trail of Bits methodologies.

72|602|Updated Dec 13, 2021
One-click install
npx skills add https://github.com/hyperlane-xyz/hyperlane-monorepo --skill claude-tob-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: claude-tob-review
Source: https://github.com/hyperlane-xyz/hyperlane-monorepo/tree/main/.claude/skills/claude-tob-review
Command: npx skills add https://github.com/hyperlane-xyz/hyperlane-monorepo --skill claude-tob-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables deep security analysis of Solidity contracts using Trail of Bits methodologies, helping teams identify vulnerabilities and invariant issues early in the development lifecycle.

Core Features & Use Cases

  • In-depth security analysis: Apply Trail of Bits methodologies to harden Solidity contracts and surface invariants.
  • Guided review scenarios: Useful during reviews of new or modified contracts, before upgrades, and for security audit preparation.
  • Actionable findings: Produce vulnerability variants with severity ratings and invariant recommendations for testing.

Quick Start

Review the latest Solidity changes in your PR and apply the Trail of Bits guidelines to generate a security notes report.

Frequently Asked Questions about claude-tob-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a Solidity smart contract security review before deployment?

To perform a Solidity security review, this Skill analyzes your contracts using Trail of Bits methodologies to identify vulnerabilities and surface invariants. It generates a security notes report with severity ratings and testing recommendations for pre-deploy audits.

What are invariants in smart contracts and how do I detect them?

Invariants are conditions that must always hold true in smart contracts. This Skill detects invariant issues during security analysis by applying Trail of Bits guidelines, providing actionable recommendations for testing these critical properties.

Can I use this Trail of Bits methodology review for modified contracts in a pull request?

Yes, this Skill is applicable during code reviews of new or modified Solidity contracts within your PR. It evaluates the latest changes against Trail of Bits guidelines to produce findings with severity ratings.

How do I prepare for a Solidity upgrade proposal security audit?

For upgrade proposal security assurance, this Skill analyzes your Solidity contracts to identify vulnerabilities and invariant issues. It outputs a security notes report with severity ratings based on Trail of Bits methodologies.

Does this code review Skill work without external dependencies?

Yes, this Solidity security analysis Skill operates without external dependencies. It enforces Trail of Bits guidelines internally to produce vulnerability findings and invariant recommendations for testing.