skills.rest
fjor1025
fjor1025COMMUNITY
Explore all skills by this author →
GitHub

secure-workflow-guide

Guide smart contract development through a 5-step security workflow with Slither.

Updated Feb 13, 2026
Search Tags:#auditing#secure development#vulnerability scanning#slither#smart contract security#trail of bits
One-click install
npx skills add https://github.com/fjor1025/InfoSec-Framework --skill secure-workflow-guide-fjor1025
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/fjor1025/InfoSec-Framework/tree/main/ClaudeSkills/plugins/building-secure-contracts/skills/secure-workflow-guide
Command: npx skills add https://github.com/fjor1025/InfoSec-Framework --skill secure-workflow-guide-fjor1025

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in smart contract development by guiding users through a comprehensive, multi-step security workflow, ensuring vulnerabilities are identified and mitigated early in the development lifecycle.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Leverages tools like Slither to detect common security flaws.
  • Feature-Specific Checks: Validates critical features such as upgradeability and ERC standard conformance.
  • Visual Security Analysis: Generates diagrams to help understand inheritance, function access, and state variable authorization.
  • Security Property Documentation: Assists in defining and documenting essential security properties for fuzzing and formal verification.
  • Manual Review Guidance: Highlights areas often missed by automated tools, like privacy and front-running risks.
  • Use Case: A smart contract developer can use this Skill before deploying a new DeFi protocol to ensure it passes a rigorous security checklist, reducing the risk of costly exploits.

Quick Start

Use the secure-workflow-guide skill to run a full security audit on the current project.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a secure smart contract development workflow?▼

A secure smart contract development workflow is a multi-step process that integrates automated vulnerability scanning, feature checks, and manual review guidance to identify and mitigate security flaws early in the lifecycle.

How do I audit a smart contract using Slither?▼

You audit a smart contract using Slither by running it through a structured 5-step workflow that leverages automated vulnerability detection, validates upgradeability and ERC conformance, and generates visual diagrams for inheritance and function access analysis.

Do I need to install Slither to run a smart contract security audit?▼

Yes, you need Slither installed and available in your environment, specifically including slither-check-upgradeability and slither-check-erc, to execute the automated vulnerability scanning and feature-specific checks.

What security issues do automated tools miss in smart contracts?▼

Automated tools often miss complex security issues in smart contracts like privacy risks and front-running vulnerabilities, which is why a comprehensive workflow includes manual review guidance to highlight these specific blind spots.

How do I document security properties for smart contract fuzzing?▼

You document security properties for smart contract fuzzing by following a guided workflow step that assists in defining and recording essential security properties required for formal verification and fuzzing processes.

Can I check ERC standard conformance and upgradeability automatically?▼

Yes, you can check ERC standard conformance and upgradeability automatically by utilizing the slither-check-erc and slither-check-upgradeability tools integrated into the secure development workflow.

Related Skills

Explore More Software Engineering Skills→
SuperlendSuperlend

secure-workflow-guide

Guide Ethereum smart contract development through Trail of Bits' five-step secure workflow.

Official
Advanced
andrescardonas7andrescardonas7

secure-workflow-guide

Guide smart contract security reviews through Trail of Bits' 5-step workflow.

Community
Advanced
macaughmacaugh
5

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

Community
Advanced
Ramprasad4121Ramprasad4121
1

security-auditor

Audit Solidity smart contracts using Slither, Aderyn, and the Map-Hunt-Attack methodology.

Community
Advanced