skills.rest
Ayoub-ouederni
Ayoub-ouederniCOMMUNITY
Explore all skills by this author →
GitHub

guidelines-advisor

Analyzes smart contract codebases against Trail of Bits development guidelines and produces prioritized recommendations.

Updated Apr 3, 2026
Search Tags:#code review#documentation#security analysis#smart contracts#solidity#upgradeability#trail of bits
One-click install
npx skills add https://github.com/Ayoub-ouederni/SENTINEL --skill guidelines-advisor-ayoub-ouederni
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: guidelines-advisor
Source: https://github.com/Ayoub-ouederni/SENTINEL/tree/main/.claude/skills/guidelines-advisor
Command: npx skills add https://github.com/Ayoub-ouederni/SENTINEL --skill guidelines-advisor-ayoub-ouederni

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Smart contract teams often ship code without systematic review of documentation, architecture, upgradeability, and testing practices, leaving avoidable vulnerabilities and quality gaps undiscovered until audits or exploits. ## Core Features & Use Cases - Documentation & Specification Generation: Creates plain English system descriptions, architectural diagrams, and identifies NatSpec documentation gaps. - Architecture & Implementation Review: Assesses on-chain/off-chain distribution, upgradeability patterns, delegatecall proxies, function composition, inheritance, events, and common pitfalls like reentrancy. - Prioritized Recommendations: Delivers findings ranked CRITICAL, HIGH, MEDIUM, and LOW with file and line references. - Use Case: Before deploying a Solidity marketplace contract, run the advisor to detect a reentrancy bug in the purchase function, flag a missing upgrade timelock, and get a week-by-week path to production readiness. ## Quick Start Analyze my smart contract codebase using Trail of Bits development guidelines and give me prioritized improvement recommendations.

Frequently Asked Questions about guidelines-advisor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a smart contract codebase against Trail of Bits guidelines?▼

Invoke the guidelines-advisor skill with access to your codebase. It runs five phases: discovery, documentation generation, architecture analysis, implementation review, and prioritized recommendations covering 11 assessment areas.

What does a smart contract development guidelines review check?▼

The review checks documentation completeness, on-chain versus off-chain computation, upgradeability patterns, delegatecall proxies, function composition, inheritance, events, common pitfalls like reentrancy, dependencies, testing coverage, and platform-specific issues.

Does this work with non-Solidity platforms like Rust or Cairo?▼

Yes, the advisor adapts to your platform including Solidity, Rust, and Cairo. It uses tools like Slither when available for Solidity projects but works without them, adjusting checks to platform-specific best practices.

Can it analyze upgradeability and proxy patterns?▼

Yes, it checks storage layout consistency, initialization patterns, function shadowing, and direct implementation usage for delegatecall proxies. It verifies proxy presence through explicit codebase search before declaring sections not applicable.

What output format does the analysis report use?▼

The report contains system documentation, architecture analysis, implementation review, and prioritized recommendations grouped as CRITICAL, HIGH, MEDIUM, and LOW. All findings include file and line references with an overall maturity assessment.

Related Skills

Explore More Software Engineering Skills→
LuisSambranoLuisSambrano
7

evm-foundry

Develop, test, and deploy Solidity smart contracts on Celo using Foundry.

Community
Advanced
BerryKuipersBerryKuipers
7

audit-dependencies

Audit npm dependencies for security vulnerabilities and outdated packages.

Community
Intermediate
kayroalexandrekayroalexandre

blockchain-security-auditor

Analyze blockchain smart contracts to detect vulnerabilities and validate security properties.

Community
Advanced
ClearMeasureLabsClearMeasureLabs
3

owasp-dependency-scan

Scan .NET and npm dependencies for disclosed CVEs and generate consolidated security reports.

Official
Advanced