skills.rest
ofelixdev
ofelixdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

secure-workflow-guide

Guide smart contract security reviews through a 5-step workflow with Slither scanning.

Updated Feb 24, 2026
Search Tags:#security#auditing#smart contracts#vulnerability scanning#slither#echidna#manticore
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill secure-workflow-guide-ofelixdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-workflow-guide
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/secure-workflow-guide
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill secure-workflow-guide-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust smart contract security by guiding developers through a comprehensive, multi-step secure development workflow, identifying and mitigating vulnerabilities before deployment.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Leverages Slither to detect over 70 common smart contract vulnerabilities.
  • Specialized Feature Checks: Validates upgradeability, ERC conformance, and token integrations.
  • Visual Security Analysis: Generates diagrams for inheritance, function summaries, and variable authorization to aid manual review.
  • Security Property Documentation & Fuzzing Setup: Assists in defining and documenting security invariants for tools like Echidna and Manticore.
  • Manual Review Guidance: Highlights areas often missed by automated tools, such as privacy, front-running, and cryptographic risks.
  • Use Case: Before deploying a new DeFi protocol, run this Skill to ensure it passes automated checks, has clear security properties documented, and has undergone a thorough manual review of potential risks.

Quick Start

Run the secure-workflow-guide skill to perform a full security review of your smart contract codebase.

Frequently Asked Questions about secure-workflow-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a comprehensive smart contract security audit before deployment?▼

A smart contract security audit can be performed by following a 5-step workflow that integrates automated vulnerability scanning, visual security inspections, and manual review guidance to identify and mitigate risks before deployment.

How do I use Slither, Echidna, and Manticore for smart contract vulnerability scanning?▼

You can use Slither for automated vulnerability scanning to detect over 70 common issues, while Echidna and Manticore are utilized by documenting and defining security invariants for fuzzing and formal verification during the workflow.

What is included in a secure development workflow for DeFi protocols?▼

A secure development workflow for DeFi protocols includes automated vulnerability scanning, specialized feature checks for upgradeability and ERC conformance, visual analysis diagrams, and manual review of privacy and front-running risks.

Does this security workflow check for upgradeability and ERC token conformance?▼

Yes, the security workflow includes specialized feature checks that validate upgradeability, ERC conformance, and token integrations to ensure your smart contracts meet required standards.

What smart contract risks are missed by automated scanning tools like Slither?▼

Automated scanning tools often miss privacy risks, front-running vulnerabilities, and cryptographic risks, which is why this workflow includes manual review guidance to highlight these specific areas.

How do I document security properties for smart contract fuzzing?▼

Documenting security properties for fuzzing involves defining and documenting security invariants for tools like Echidna and Manticore, assisted by visual analysis of inheritance, function summaries, and variable authorization.

Related Skills

Explore More Software Engineering Skills→
iiammaeiiammae

secure-workflow-guide

Guides Solidity smart contracts through a 5-step security review workflow using Slither, Echidna, and Manticore.

Community
Advanced
manuelbrandner85manuelbrandner85

secure-workflow-guide

Run a 5-step security audit on smart contract codebases using Slither, Echidna, and Manticore.

Community
Advanced
MicrockMicrock
322

solidity-security

Mitigate vulnerabilities in Solidity smart contracts using secure development patterns.

Community
Intermediate
jc180105jc180105

Blockchain Security Auditor

Identify and remediate smart-contract vulnerabilities in DeFi protocols.

Community
Advanced