secure-workflow-guide

Guides Solidity smart contracts through a 5-step security review workflow using Slither, Echidna, and Manticore.

Updated Jun 9, 2026

Search Tags:#security #smart contract #Slither #Echidna #Manticore

Ready to run

npx skills add https://github.com/iiammae/opero --skill secure-workflow-guide-iiammae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/secure-workflow-guide
Command: npx skills add https://github.com/iiammae/opero --skill secure-workflow-guide-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires slither, echidna, manticore, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill guides through Trail of Bits' secure development workflow, enhancing smart contract security throughout the development process.

Core Features & Use Cases

Security Scanning: Identifies and resolves common vulnerabilities with Slither scans.
Feature Validation: Checks for upgradeability, ERC conformance, and token integration.
Visual Inspection: Generates visual security diagrams for inheritance, functions, and state variables.
Documentation: Assists in documenting security properties and setting up testing tools like Echidna and Manticore.
Manual Review: Analyzes privacy, front-running risks, cryptography, and DeFi interactions.

Quick Start

Run the secure-workflow-guide skill on your smart contract codebase to begin the 5-step security review process.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a complete smart contract security audit using Slither, Echidna, and Manticore?▼

A smart contract security audit follows a 5-step workflow: Slither security scanning, Echidna and Manticore feature validation, visual inspection, documentation, and manual review to ensure best practices and standards compliance.

What is the best way to find common vulnerabilities in Solidity smart contracts?▼

Finding common vulnerabilities in Solidity smart contracts requires automated security scanning with Slither, followed by feature validation for upgradeability and ERC conformance, and manual review of DeFi interactions and cryptography.

Can I use this secure workflow to check ERC conformance and token integration in my smart contract?▼

Yes, this secure workflow checks ERC conformance and token integration during the feature validation step, verifying upgradeability and protocol compatibility before proceeding to visual inspection and manual security review.

Do I need Slither, Echidna, and Manticore installed to run this smart contract security review?▼

Yes, this 5-step smart contract security workflow requires Slither, Echidna, and Manticore installed, as these tools execute the automated vulnerability scanning, feature validation, and property testing across your Solidity codebase.

How do I generate visual security diagrams for inheritance and state variables in Solidity?▼

Generating visual security diagrams for Solidity inheritance, functions, and state variables is the third step of this workflow, using custom analysis tools to visually inspect the contract structure after automated scanning.

What security risks are not caught by automated Slither scans and need manual review in smart contracts?▼

Risks not caught by automated Slither scans include privacy issues, front-running risks, cryptography flaws, and DeFi interactions, which require the final manual review step of this comprehensive security workflow.