evmbench

Audit Solidity, Vyper, Yul, Huff, and Fe smart contracts for vulnerabilities.

1|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/run6270/skill --skill evmbench
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: evmbench
Source: https://github.com/run6270/skill/tree/main/evmbench
Command: npx skills add https://github.com/run6270/skill --skill evmbench

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a fully automated, end-to-end security audit for smart contracts, identifying vulnerabilities and suggesting patches without any manual intervention.

Core Features & Use Cases

  • Automated Vulnerability Detection: Scans Solidity, Vyper, Yul, Huff, and Fe contracts for a comprehensive list of critical, high, and medium severity vulnerabilities.
  • Patch Generation: Automatically generates concrete code fixes for identified critical and high severity issues.
  • Structured Reporting: Outputs a detailed security report including findings, impact, and suggested patches.
  • Use Case: Upload your new Solidity smart contract code, and receive a full security audit report with suggested fixes within minutes.

Quick Start

Audit the smart contract located at '/path/to/my/contract.sol'.

Frequently Asked Questions about evmbench

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated security audit on a Solidity smart contract?

The Skill performs an automated security audit on Solidity, Vyper, Yul, Huff, and Fe smart contracts. It detects critical, high, and medium vulnerabilities and generates concrete code patches for critical and high severity findings.

Does this smart contract vulnerability detection tool support Vyper and Yul codebases?

Yes, this smart contract vulnerability detection tool supports Vyper and Yul codebases, alongside Solidity, Huff, and Fe. It scans all these EVM-compatible languages to identify critical, high, and medium severity security issues.

Can I automatically generate patches for high severity vulnerabilities in EVM smart contracts?

Yes, you can automatically generate patches for high severity vulnerabilities in EVM smart contracts. The audit process specifically generates concrete code fixes for both critical and high severity findings, while reporting on medium severity issues.

What is the best way to audit smart contract security without manual intervention?

The best way to audit smart contract security without manual intervention is using a fully automated end-to-end process. This Skill scans the codebase, outputs a detailed structured report of findings and impact, and suggests code fixes within minutes.

Do I need Bash and file system tools to analyze smart contract code for security issues?

Yes, you need Bash, Read, Glob, and Write tools to analyze smart contract code for security issues. These tools are required for the Skill to perform file system operations, read the codebase, and output the structured security report.

Why does my automated smart contract audit not generate patch suggestions for medium severity findings?

An automated smart contract audit does not generate patch suggestions for medium severity findings by design. The patch generation feature is exclusively limited to identified critical and high severity vulnerabilities to prioritize immediate security risks.