skills.rest
andrescardonas7
andrescardonas7COMMUNITY
Explore all skills by this author →
GitHub

secure-workflow-guide

Guide smart contract security reviews through Trail of Bits' 5-step workflow.

Updated Jan 30, 2026
Search Tags:#security#vulnerability assessment#smart contracts#slither#echidna#manticore
One-click install
npx skills add https://github.com/andrescardonas7/salchipapa-web --skill secure-workflow-guide-andrescardonas7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/andrescardonas7/salchipapa-web/tree/main/.cursor/skills/secure-workflow-guide
Command: npx skills add https://github.com/andrescardonas7/salchipapa-web --skill secure-workflow-guide-andrescardonas7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill automates and guides you through a rigorous 5-step secure development workflow to proactively identify and mitigate security vulnerabilities in your smart contracts.

Core Features & Use Cases

  • Automated Security Scans: Runs Slither with numerous detectors to find common vulnerabilities.
  • Feature Validation: Checks for upgradeability risks, ERC conformance, and token integration.
  • Visual Security Analysis: Generates diagrams for inheritance, function summaries, and authorization.
  • Property Documentation & Testing Setup: Assists in documenting security properties and setting up fuzzing/verification tools like Echidna and Manticore.
  • Manual Review Guidance: Highlights critical areas often missed by automated tools, such as privacy, front-running, and DeFi risks.
  • Use Case: Before deploying a new smart contract, run this Skill to get a comprehensive security report, including prioritized fixes and a checklist for deployment readiness.

Quick Start

Run the secure-workflow-guide skill to perform a full security review of the current project.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive smart contract security audit before deployment?▼

Run a smart contract security audit by executing Slither scans for vulnerabilities, checking upgradeability and ERC conformance, generating visual diagrams, and documenting properties for fuzzing and formal verification.

What is the best way to find smart contract vulnerabilities using Slither, Echidna, and Manticore?▼

Find vulnerabilities by running Slither with numerous detectors for automated scanning, then document security properties to set up Echidna and Manticore for targeted fuzzing and formal verification of the codebase.

How do I check smart contracts for upgradeability risks and ERC conformance?▼

Check smart contracts for upgradeability risks and ERC conformance by running automated feature validation scans that identify integration issues and deviations from token standards within your project.

Can I generate visual security diagrams for my smart contract codebase?▼

Generate visual security diagrams for your smart contract codebase by analyzing inheritance structures, function summaries, and authorization flows to visually map potential security weaknesses.

What manual security review areas should I check beyond automated smart contract scans?▼

Manual security review areas beyond automated scans include privacy risks, front-running vulnerabilities, and DeFi integration risks that automated tools often miss during the secure development workflow.

Do I need to install security tools before running a smart contract vulnerability assessment?▼

You need a project codebase to run a smart contract vulnerability assessment, and optionally installing security tools like Slither, Echidna, and Manticore enables deeper automated scanning and formal verification.

Related Skills

Explore More Software Engineering Skills→
iiammaeiiammae

secure-workflow-guide

Guides Solidity smart contracts through a 5-step security review workflow using Slither, Echidna, and Manticore.

Community
Advanced
infiquetrainfiquetra
8

sdk-security-review

Scan SDK dependencies for vulnerabilities and generate OWASP-based security scorecards.

Official
Advanced
Likas07Likas07

blockchain-security-auditor

Audit smart contracts for vulnerabilities and generate remediation reports.

Community
Advanced
saschadudkin-sketchsaschadudkin-sketch

security-reviewer

Identify security vulnerabilities in code and infrastructure and generate audit reports with severity ratings.

Community
Advanced