skills.rest
aeoncity-demo
aeoncity-demoCOMMUNITY
Explore all skills by this author →
GitHub

Contract Audit

Audit Base blockchain smart contracts for security vulnerabilities and capability matrices.

Updated Jun 17, 2026
Search Tags:#security audit#blockchain#smart contract#Base blockchain#onchain security
One-click install
npx skills add https://github.com/aeoncity-demo/myaeon --skill contract-audit-aeoncity-demo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Contract Audit
Source: https://github.com/aeoncity-demo/myaeon/tree/main/skills/contract-audit
Command: npx skills add https://github.com/aeoncity-demo/myaeon --skill contract-audit-aeoncity-demo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ETHERSCAN_API_KEY, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the audit of smart contracts on the Base blockchain, checking for security vulnerabilities and providing a live capability matrix of the contract.

Core Features & Use Cases

  • Contract Verification: Checks if the contract is verified on Etherscan and retrieves source code information.
  • Proxy/Upgradeability Analysis: Determines if the contract is upgradeable and identifies the upgradeable logic.
  • Ownership and Admin Roles: Inspects ownership and admin roles, checking for renounced ownership.
  • Function Surface Analysis: Identifies dangerous functions that can be used to mint, drain, or upgrade the contract.
  • Notification and Logging: Sends notifications and logs the audit results with a capability matrix.

Quick Start

Audit a contract by using the 'Contract Audit' skill with the contract address as input.

Frequently Asked Questions about Contract Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a smart contract for security vulnerabilities on Base blockchain?▼

You can audit a smart contract on the Base blockchain by providing the contract address to automate checks for verification status, ownership roles, upgradeability, and dangerous functions. This generates a live capability matrix detailing the contract's security surface.

How can I check if a smart contract is upgradeable or has renounced ownership?▼

Checking upgradeability and ownership involves analyzing proxy logic and admin roles to determine if the contract is upgradeable or if ownership has been renounced. This identifies who controls the contract and whether its logic can be modified after deployment.

Do I need an Etherscan API key to perform a Base blockchain security audit?▼

Yes, you need an Etherscan API key to perform a Base blockchain security audit because the Skill depends on it to fetch contract verification status and retrieve source code. This key is required to access the necessary data for analyzing dangerous functions.

What functions are considered dangerous in a smart contract security audit?▼

Dangerous functions in a smart contract security audit are identified as those capable of minting tokens, draining funds, or upgrading the contract logic. Detecting these functions helps prevent unauthorized privilege escalation and asset loss.

Related Skills

Explore More Software Engineering Skills→
basebase
104

deploying-contracts-on-base

Deploy and verify Solidity smart contracts on Base using Foundry.

Official
Intermediate
cellarwoodcellarwood

gws-admin-reports

Retrieve and aggregate Google Workspace Admin SDK activity and usage reports via CLI.

Official
Intermediate
ApegurusApegurus
1

report-template

Generate a standardized markdown template for smart contract security audit reports.

Community
Basic
Canhada-LabsCanhada-Labs
2

blockchain-security-audit

Identify security vulnerabilities in EVM smart contracts and DeFi protocols.

Official
Advanced