skills.rest
ayehiaa
ayehiaaCOMMUNITY
Explore all skills by this author →
GitHub

secure-workflow-guide

Run a 5-step security workflow with Slither scans and security diagrams for Solidity.

Updated May 2, 2026
Search Tags:#property-based testing#upgradeability#slither#smart contract security#erc conformance#security diagrams#manual threat modeling
One-click install
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill secure-workflow-guide-ayehiaa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/secure-workflow-guide
Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill secure-workflow-guide-ayehiaa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill reduces smart-contract security risk by turning a generic review into a structured, repeatable workflow that catches known issues, validates special design features, and forces security-property documentation before release.

Core Features & Use Cases

  • Runs a known-issues scan with Slither to surface common vulnerabilities, triage them by severity, and tie findings to file references with actionable remediation guidance.
  • Detects and validates special features such as upgradeability and ERC conformance, and recommends follow-on analysis for token integration and ERC security properties.
  • Produces security diagrams and testing-ready property documentation to clarify inheritance/function/authorization behavior and to support fuzzing and formal verification via documented invariants.
  • Completes a manual review pass for attack classes that tools miss well (privacy, front-running/MEV, cryptography pitfalls, and DeFi/oracle/flash-loan assumptions).

Quick Start

Use the secure-workflow-guide skill on your Solidity repository to run the full 5-step secure development workflow and return a prioritized security action plan.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a complete smart contract security audit before deployment?▼

A complete smart contract security audit requires a repeatable workflow that scans known vulnerabilities with Slither, validates upgradeability and ERC conformance, generates security diagrams, and performs manual threat modeling to catch DeFi and cryptography risks.

What does manual threat modeling cover for smart contracts that automated tools miss?▼

Manual threat modeling for smart contracts covers attack classes that automated tools miss, including privacy leaks, front-running and MEV exposure, cryptography pitfalls, and DeFi oracle or flash-loan assumption failures.

How do I validate upgradeability and ERC conformance in Solidity contracts?▼

To validate upgradeability and ERC conformance, execute feature checks on your Solidity repository to detect special design patterns, followed by recommended analysis for token integration and ERC-specific security properties.

Can I generate security properties for property-based testing from my Solidity code?▼

Yes, you can generate testing-ready security property documentation from Solidity code by clarifying inheritance, function, and authorization behavior to support fuzzing and formal verification via documented invariants.

Does Slither scan find common smart contract vulnerabilities with remediation guidance?▼

Yes, running Slither detectors surfaces common smart contract vulnerabilities, triages findings by severity, and ties results to file references with actionable remediation guidance for developers.

What's the best way to document security invariants for formal verification of smart contracts?▼

The best way to document security invariants for formal verification is producing security diagrams and property documentation that clarify authorization behavior and support fuzzing workflows across the contract codebase.

Related Skills

Explore More Software Engineering Skills→
roderikroderik
54

rr-solidity

Review Solidity smart contracts for security vulnerabilities using Foundry.

Community
Advanced
v1bh0rv1bh0r

nw-pbt-rust

Guide property-based testing in Rust with proptest, quickcheck, and bolero.

Community
Intermediate
damianpapadopoulosdamianpapadopoulos
6

security-scanner

Scan code changes for security vulnerabilities using static and dynamic analysis tools.

Community
Advanced
iulianditaiuliandita
2

full-review

Orchestrate parallel execution of four audit skills for codebase quality assessment.

Community
Advanced