multiversx-code-analysis

Analyzes smart contracts for risks and version-to-version compatibility issues.

12|5|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-code-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: multiversx-code-analysis
Source: https://github.com/multiversx/mx-ai-skills/tree/main/skills/multiversx-code-analysis
Command: npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-code-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit to analyze MultiversX smart contract code, ensuring security, identifying upgrade risks, and verifying the effectiveness of fixes.

Core Features & Use Cases

  • Differential Review: Compare code versions to detect breaking changes, storage incompatibilities, and new vulnerabilities.
  • Fix Verification: Rigorously test if a vulnerability fix is effective and hasn't introduced regressions.
  • Variant Analysis: Systematically find similar bugs across the codebase to ensure all instances of a vulnerability are addressed.
  • Use Case: When reviewing a pull request for a smart contract upgrade, use this Skill to perform a differential review, check for storage layout compatibility, and ensure no new security flaws were introduced.

Quick Start

Perform a differential review between versions v1.0.0 and v2.0.0 of the smart contract code.

Frequently Asked Questions about multiversx-code-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check MultiversX smart contracts for security vulnerabilities and upgrade risks?

You can verify MultiversX smart contract security by performing a comprehensive code analysis. This involves differential review to detect breaking changes, storage incompatibilities, and variant analysis to systematically identify similar bugs across the Rust-based codebase.

What is differential review for MultiversX smart contract upgrades?

Differential review for MultiversX smart contract upgrades compares code versions to detect breaking changes. It identifies storage incompatibilities and new vulnerabilities to ensure upgrade safety and prevent regressions in Rust-based contracts.

How do I verify if a vulnerability fix is effective in a MultiversX Rust contract?

To verify a vulnerability fix in a MultiversX Rust contract, use fix verification to rigorously test the patch. This confirms the security flaw is resolved and ensures the correction has not introduced new regressions.

Can I use this code analysis approach for pull request reviews on MultiversX?

Yes, you can use this code analysis for pull request reviews on MultiversX. It performs differential reviews to check storage layout compatibility, verifies fixes, and ensures no new security flaws were introduced during the smart contract upgrade.

Does MultiversX code analysis require specific SDK patterns for accurate results?

Yes, accurate MultiversX code analysis requires adherence to specific MultiversX SDK patterns and best practices. Following these Rust-based smart contract standards ensures the security audit, fix verification, and variant analysis yield correct results.