What problem does it solve? Smart contract developers often skip structured security review or rely on ad-hoc checks, missing vulnerabilities that automated detectors and property-based testing would catch. This Skill walks you through Trail of Bits' 5-step secure development workflow so every check-in or pre-deployment review follows a consistent, thorough process. ## Core Features & Use Cases - Automated Vulnerability Scanning: Runs Slither with 70+ detectors, parses findings by severity, and recommends fixes with file references. - Special Feature Validation: Checks upgradeability risks, ERC conformance, and token integration patterns only when applicable to your codebase. - Visual Security Inspection: Generates inheritance graphs, function summaries, and state-variable authorization diagrams to expose shadowing and access control issues. - Property Documentation & Testing: Helps document security invariants and set up Echidna fuzzing or Manticore symbolic execution. - Use Case: Before deploying an upgradeable ERC20 staking contract, run the workflow to get a clean Slither report, validated upgrade safety, documented invariants with fuzzing coverage, and a prioritized action plan. ## Quick Start Ask the assistant to run the secure development workflow on your Solidity project before your next deployment.
