skills.rest
buzzbysolcex
buzzbysolcexCOMMUNITY
Explore all skills by this author →
Website𝕏@BuzzBySolCexGitHub

contract-auditor

Fetch verified Solidity source and produce a machine-readable audit JSON.

5|2|Updated Feb 6, 2026
Search Tags:#risk scoring#smart contract auditing#solidity security#evm vulnerability scanning#token listing safety#verified source#rug risk flags
One-click install
npx skills add https://github.com/buzzbysolcex/buzz-bd-agent --skill contract-auditor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: contract-auditor
Source: https://github.com/buzzbysolcex/buzz-bd-agent/tree/main/skills/contract-auditor
Command: npx skills add https://github.com/buzzbysolcex/buzz-bd-agent --skill contract-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Solidity/EVM token contracts can hide high-impact vulnerabilities that generic scanners miss; contract-auditor fetches verified source code and produces a structured, risk-ranked safety pre-check to prevent unsafe tokens from advancing in the BD scoring pipeline.

Core Features & Use Cases

  • On-chain verified-source security scan: Retrieves verified contract source from Etherscan/BaseScan, triages source size, and runs a pattern library for critical/high vulnerability shapes.
  • Actionable scoring integration: Converts findings into a contract_safety_score and listing_recommendation that feeds directly into /score-token safety scoring.
  • Safer listing decisions with explicit guardrails: Automatically rejects contracts with hidden/unverified source and provides clear limitations so prospects understand confidence boundaries.

Quick Start

Use the contract-auditor skill to audit a specific contract by providing its address and chain, then request a safety score and listing recommendation for listing review.

Frequently Asked Questions about contract-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Solidity smart contract for vulnerabilities before listing it?▼

Scan a Solidity smart contract for vulnerabilities by providing its address and chain to fetch verified source code and run a structured pattern-based vulnerability pass. This generates a machine-readable audit JSON with a contract safety score and listing recommendation.

What happens when I run an EVM vulnerability scan on an unverified contract?▼

Running an EVM vulnerability scan on an unverified contract triggers automatic rejection through safety guardrails. The scanner requires verified source code from supported explorers like Etherscan or BaseScan to produce findings and a listing recommendation.

Can I use token listing safety checks for contracts on any blockchain?▼

Token listing safety checks apply to supported explorers like Etherscan and BaseScan where verified contract source code is available. The scanner enforces guardrails and rejects contracts with hidden or unverified source on unsupported chains.

How does smart contract auditing calculate the contract_safety_score?▼

Smart contract auditing calculates the contract_safety_score by converting pattern-based vulnerability findings into a risk-ranked safety pre-check. This score determines the risk level and feeds directly into the listing recommendation for token review workflows.

What is the best way to flag rug risk in EVM token contracts during listing review?▼

The best way to flag rug risk in EVM token contracts is to run a pattern library scan for critical and high vulnerability shapes. This identifies high-confidence risks and outputs a structured audit JSON with explicit rug risk flags for listing decisions.

What are the limitations of pattern-based smart contract auditing?▼

Pattern-based smart contract auditing is limited to high-confidence vulnerability shapes found in verified source code. It provides clear confidence boundaries and does not assess unverified contracts or replace comprehensive manual security reviews.

Related Skills

Explore More Legal & Compliance Skills→
woohyun212woohyun212
21

web3-smart-contract

Audit Solidity smart contracts for ten DeFi vulnerability classes using grep-pattern scans and Foundry PoC templates.

Community
Advanced
LaiTszKinLaiTszKin
4

open-github-issue

Publish structured GitHub issues with authentication fallback and JSON output.

Community
Advanced
buzzbysolcexbuzzbysolcex
5

token-scorer

Score crypto tokens with an 11-rule engine using DexScreener and on-chain data.

Community
Intermediate
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced