secure-workflow-guide

A secure smart contract development workflow systematically detects code issues, validates features like upgradeability and ERC conformance, visualizes architecture, and documents security properties. This process integrates automated tooling and manual reviews to ensure audit readiness.

To automate Slither scans for smart contract security, you run Slither with configured detectors, triage the findings, and apply suggested fixes. This skill guides that orchestration, providing actionable steps for CI/CD integration.

Yes, you can generate security diagrams for Ethereum smart contracts. The workflow produces inheritance graphs, function summaries, and variables/authorization maps to reveal underlying security patterns and architecture.

Yes, this workflow supports upgradeability and ERC conformance checks. It validates token interactions and ensures only applicable checks run based on your specific smart contract features.

The best way to prepare smart contracts for a manual security review is to document security properties and generate visual diagrams. This workflow produces actionable artifacts and a testing plan ready for integration.

To set up Echidna and Manticore tests for smart contract fuzzing and formal verification, you follow the workflow's documentation and testing planning steps. It guides you through documenting security properties to prepare these tests.