scv-scan

Identify and assess vulnerabilities in Solidity smart contracts across 36 vulnerability classes.

Updated Mar 1, 2026

Search Tags:#security #vulnerability #audit #smart contract #solidity

Ready to run

npx skills add https://github.com/cpfcoaching/glowing-palm-tree --skill scv-scan-cpfcoaching

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: scv-scan
Source: https://github.com/cpfcoaching/glowing-palm-tree/tree/main/.agent/skills/scv-scan
Command: npx skills add https://github.com/cpfcoaching/glowing-palm-tree --skill scv-scan-cpfcoaching

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, grep, bash, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of auditing and analyzing smart contracts for potential vulnerabilities, providing a comprehensive assessment and saving time and resources.

Core Features & Use Cases

Vulnerability Assessment: Identifies common security vulnerabilities in Solidity smart contracts.
Audit Workflow: Four-phase workflow covering cheatsheet loading, codebase sweep, deep validation, and reporting.
Use Case: For developers or auditors who need to perform a thorough security audit on Solidity contracts before deployment.

Quick Start

Load the cheatsheet by running the command 'scv-scan load-cheatsheet'.

Frequently Asked Questions about scv-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Solidity smart contracts for security vulnerabilities?▼

To audit Solidity smart contracts for security vulnerabilities, you can use an automated scanning workflow that sweeps the codebase, validates findings against 36 vulnerability classes, and generates a report using Python and bash scripts.

What types of vulnerabilities can be detected in a smart contract audit?▼

A smart contract audit can detect 36 specific vulnerability classes in Solidity code. The scanning process identifies these security risks by applying automated code analysis rules during the codebase sweep and deep validation phases.

Do I need Python installed to scan Solidity smart contracts for vulnerabilities?▼

Yes, you need Python installed to scan Solidity smart contracts for vulnerabilities. The auditing process relies on Python scripts along with grep and bash to perform codebase sweeps, deep validation, and vulnerability assessments.

What is the best way to automate security analysis for Solidity smart contracts before deployment?▼

The best way to automate security analysis for Solidity smart contracts is implementing a four-phase audit workflow that loads vulnerability cheatsheets, sweeps the codebase, validates findings, and generates a comprehensive security report.

Can I use bash and grep for smart contract vulnerability detection?▼

Yes, you can use bash and grep for smart contract vulnerability detection. These tools are required dependencies for the scanning process, enabling automated code analysis and pattern matching across Solidity smart contracts to identify security issues.

How does the smart contract auditing workflow handle deep validation of code?▼

The smart contract auditing workflow handles deep validation by systematically checking identified code patterns against 36 vulnerability classes. This phase follows a codebase sweep and precedes report generation to ensure accurate security assessments.