develop-secure-contracts

Integrates OpenZeppelin security patterns into Solidity projects via library-first approach.

1|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/barolivera/avalon --skill develop-secure-contracts-barolivera
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: develop-secure-contracts
Source: https://github.com/barolivera/avalon/tree/main/docs/skills/develop-secure-contracts
Command: npx skills add https://github.com/barolivera/avalon --skill develop-secure-contracts-barolivera

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OpenZeppelin provides battle-tested security patterns, and this skill guides teams to adopt a library-first approach to securely integrate those patterns into existing or new Solidity contracts, reducing risk and rework.

Core Features & Use Cases

  • Pattern discovery from library sources to identify applicable components (Ownable, AccessControl, Pausable, ReentrancyGuard, ERC20/721/1155, governance) and recommended integration points.
  • Guidance for using MCP generators and applying minimal, safe diffs to upgrade or extend contracts without breaking storage layout.
  • Use case: migrating a DeFi project to a secure upgradeable architecture with tokens, access control, and governance.

Quick Start

Inspect your project, identify OpenZeppelin imports, and apply the library-first integration workflow to add security features.

Frequently Asked Questions about develop-secure-contracts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely integrate OpenZeppelin patterns into existing Solidity smart contracts?

Securely integrate OpenZeppelin patterns into Solidity smart contracts by applying a library-first approach. This enforces proper inheritance, minimal diffs, and correct initializers to extend contracts without breaking existing storage layout.

What is the best way to add reentrancy protection and access control to ERC20 tokens?

Add reentrancy protection and access control to ERC20 tokens by discovering applicable OpenZeppelin components like ReentrancyGuard and AccessControl, then applying minimal, safe diffs to inherit these security patterns at recommended integration points.

How do I migrate DeFi smart contracts to a secure upgradeable architecture?

Migrate DeFi smart contracts to a secure upgradeable architecture by enforcing library-first imports and correct initializers for OpenZeppelin upgradeable contracts, ensuring storage layout compatibility across tokens, access control, and governance.

Does using OpenZeppelin library-first integration prevent storage layout collisions in upgradeable contracts?

Yes, using OpenZeppelin library-first integration prevents storage layout collisions in upgradeable contracts. It enforces minimal diffs and storage layout compatibility checks to safely extend contracts during audits, rewrites, and deployments.

Can I apply OpenZeppelin pausability and governance patterns across different token standards?

Yes, you can apply OpenZeppelin pausability and governance patterns across different token standards. The integration workflow supports ERC20, ERC721, and ERC1155 standards alongside access control and upgradeable contract requirements.