secure-workflow-guide

Run a 5-step security audit on smart contract codebases using Slither, Echidna, and Manticore.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill secure-workflow-guide-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/secure-workflow-guide
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill secure-workflow-guide-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the lack of standardized security practices in smart contract development by providing a rigorous, repeatable 5-step audit workflow that catches vulnerabilities early and ensures robust security properties.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Runs Slither with 70+ detectors to identify common security flaws.
  • Specialized Feature Validation: Automatically checks for upgradeability risks, ERC standard conformance, and token integration issues.
  • Security Documentation & Fuzzing: Guides the creation of security invariants and sets up property-based testing with Echidna and Manticore.
  • Use Case: Before deploying a new DeFi staking contract, use this Skill to generate visual inheritance diagrams, verify access controls, and document state machine invariants to ensure the protocol is audit-ready.

Quick Start

Invoke the secure-workflow-guide skill to begin the 5-step security audit process on your current project directory.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a smart contract security audit before deployment?

To perform a smart contract security audit, execute a 5-step workflow using Slither, Echidna, and Manticore for static analysis, formal verification, and fuzzing to catch vulnerabilities pre-deployment.

What is property-based fuzzing for smart contracts?

Property-based fuzzing for smart contracts uses Echidna and Manticore to test security invariants and state machine properties, ensuring the protocol behaves correctly under unexpected or malicious input conditions.

How do I check ERC standard conformance and upgradeability risks?

To check ERC standard conformance and upgradeability risks, run automated vulnerability scanning with Slither's 70+ detectors to validate specialized features and identify common security flaws in the codebase.

Do I need Slither installed to audit my blockchain codebase?

Yes, you need Slither, Echidna, and Manticore installed in your environment to execute the required static analysis, formal verification, and property-based fuzzing for the audit workflow.

What's the best way to document security invariants for a DeFi protocol?

To document security invariants for a DeFi protocol, follow the guided audit workflow to define state machine properties, verify access controls, and generate visual inheritance diagrams for audit readiness.