multiversx-security-audit

Audit MultiversX smart contracts for security vulnerabilities using Semgrep scanning.

12|5|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: multiversx-security-audit
Source: https://github.com/multiversx/mx-ai-skills/tree/main/skills/multiversx-security-audit
Command: npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive methodology to identify and mitigate security vulnerabilities in MultiversX smart contracts, ensuring the integrity and safety of decentralized applications.

Core Features & Use Cases

  • Structured Audit Process: Guides users through context building, entry point analysis, static analysis, and automated scanning.
  • Vulnerability Detection: Identifies common pitfalls like reentrancy, integer overflows, access control issues, and more.
  • Automated Scanning: Integrates Semgrep rules for efficient and consistent detection of known patterns.
  • Use Case: A developer needs to ensure their new MultiversX smart contract is secure before deployment. They can use this Skill to follow a rigorous audit process, identify potential risks, and implement necessary fixes.

Quick Start

Perform a security audit on the provided MultiversX smart contract code.

Frequently Asked Questions about multiversx-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on MultiversX smart contracts?

To perform a MultiversX smart contract security audit, follow a structured process of context building, entry point analysis, static analysis, and automated Semgrep scanning to identify vulnerabilities like reentrancy and access control issues.

What vulnerabilities should I look for in MultiversX Rust smart contracts?

When auditing MultiversX Rust smart contracts, look for reentrancy, arithmetic overflows, access control issues, and callback handling risks using static analysis patterns and automated Semgrep rules.

Does Semgrep work for MultiversX smart contract vulnerability detection?

Yes, Semgrep integrates into the MultiversX audit workflow to provide efficient and consistent automated scanning of known vulnerability patterns within Rust and Go smart contract code.

What is the best way to prevent reentrancy in MultiversX smart contracts?

The best way to prevent reentrancy in MultiversX smart contracts is to execute a detailed security audit methodology encompassing entry point analysis and static analysis to identify and mitigate callback handling risks before deployment.

Do I need Rust coding standards knowledge to audit MultiversX smart contracts?

Yes, auditing MultiversX smart contracts requires adherence to specific Rust and Go coding standards and best practices to accurately identify access control issues and arithmetic overflows during static analysis.

Why does my MultiversX smart contract audit fail to detect access control issues?

Your audit may fail to detect access control issues if it lacks structured context building and entry point analysis, which are required to map execution flows and identify unauthorized callback handling in MultiversX smart contracts.