guidelines-advisor

Analyze Solidity smart contracts for security vulnerabilities and architectural inefficiencies.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill guidelines-advisor-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: guidelines-advisor
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/guidelines-advisor
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill guidelines-advisor-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the complexity of smart contract development by providing a systematic, security-focused review process based on industry-standard best practices. It helps developers identify architectural flaws, security vulnerabilities, and documentation gaps before deployment.

Core Features & Use Cases

  • Comprehensive Security Audit: Analyzes code for common pitfalls like reentrancy, access control issues, and integer overflows.
  • Architectural Review: Evaluates on-chain vs. off-chain logic, upgradeability patterns, and proxy implementation safety.
  • Documentation & Testing: Generates system specifications and identifies gaps in test coverage or NatSpec documentation.
  • Use Case: Before deploying a new DeFi protocol, use this skill to audit your proxy upgradeability pattern and ensure your test suite covers critical edge cases.

Quick Start

Invoke the guidelines-advisor to perform a full security and architecture assessment of the smart contracts in the current repository.

Frequently Asked Questions about guidelines-advisor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contract code for security vulnerabilities before deployment?

To audit smart contract code, you need to systematically analyze the codebase for reentrancy, access control issues, and integer overflows. This process identifies architectural flaws and documentation gaps using static analysis and best-practice adherence.

What is the best way to review proxy upgradeability patterns in Solidity?

Reviewing proxy upgradeability patterns involves evaluating on-chain versus off-chain logic and proxy implementation safety. This architectural review ensures your upgradeability patterns follow industry-standard best practices before DeFi protocol deployment.

Does this smart contract audit process work with EVM-compatible development projects?

Yes, this smart contract audit process applies to Solidity and EVM-compatible development projects. It requires static analysis capabilities and adherence to Trail of Bits development guidelines to ensure rigorous security assessments.

How do I identify documentation gaps and missing test coverage in my smart contracts?

To identify documentation gaps, analyze the smart contract codebase for missing NatSpec documentation and test coverage. The process generates system specifications and highlights critical edge cases that your test suite needs to cover.

Can I use this to check for integer overflows and access control issues in Solidity?

Yes, you can check for integer overflows and access control issues in Solidity. The comprehensive security audit systematically analyzes the codebase to identify these common pitfalls alongside architectural inefficiencies.