secure-workflow-guide

A secure development workflow for Solidity smart contracts involves automating Slither scans, checking upgradeability and ERC conformance, generating diagrams, and documenting security properties. This Skill applies Trail of Bits' 5-step process to produce actionable findings and visual diagrams.

The best way to prepare for a smart contract security audit is running a structured pre-audit workflow. This Skill executes automated Slither checks, token integration checks, and manual review steps to generate a robust action plan for fixes and documentation.

Yes, you need Slither and related tooling installed to run automated smart contract security checks. The Skill requires Slither to perform automated scans, feature checks, and security property validations during CI check-ins or pre-deployment reviews.

Yes, you can generate visual architecture diagrams for smart contract security reviews. The Skill produces visual diagrams and documented security properties as part of its five-step workflow, providing a robust output for fixes and future improvements.

You should run a smart contract security workflow during CI check-ins, pre-deployment reviews, and formal security audits. The workflow produces an actionable security report and recommendations by validating upgradeability, ERC conformance, and token integration.