security-audit

Automate smart contract security audits with Solodit searches and template-based reports.

17|45|Updated Jan 23, 2026

Search Tags:#security #vulnerability #audit #reporting #poc #smart-contract #solodit

Ready to run

npx skills add https://github.com/XSpoonAi/spoon-awesome-skill --skill security-audit-xspoonai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/XSpoonAi/spoon-awesome-skill/tree/main/web3-core-operations/security-audit
Command: npx skills add https://github.com/XSpoonAi/spoon-awesome-skill --skill security-audit-xspoonai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Security audits of smart contracts are labor-intensive, requiring the coordination of vulnerability databases, contract retrieval from explorers, and comprehensive reporting. This Skill automates those tasks by linking Solodit-based findings, contract fetch workflows, and template-driven audit reports to accelerate evaluation.

Core Features & Use Cases

Vulnerability search across 50,000+ findings via Solodit
Contract retrieval from 40+ blockchain explorers and auto-detection of project frameworks
Static analysis integration, PoC templates, and standardized audit reports

Quick Start

Run a vulnerability search with Solodit, fetch a contract's source, and auto-detect the project framework to begin an audit.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate smart contract security audits for Solidity?▼

Automating smart contract security audits requires searching vulnerability databases, retrieving source code from blockchain explorers, and generating template-based reports. This Skill integrates Solodit findings, static analysis, and PoC templates to streamline the process.

Do I need a Solodit API key to run vulnerability searches?▼

Yes, the SOLODIT_API_KEY is required to search the 50,000+ vulnerability findings. Optional blockchain explorer API keys can also be added to enable automated contract source code retrieval from 40+ networks.

What is the best way to generate a standardized audit report for smart contracts?▼

The best way to generate standardized audit reports is through template-driven generation after completing automated vulnerability searches and static analysis. This approach ensures comprehensive coverage across Solidity and other blockchain frameworks.

Can I fetch contract source code from multiple blockchain explorers during an audit?▼

Yes, you can fetch contract source code from 40+ blockchain explorers during an audit. The workflow also includes auto-detecting project frameworks to properly contextualize the security evaluation.

How does static analysis integrate with PoC templates in smart contract audits?▼

Static analysis integration with PoC templates works by detecting potential vulnerabilities and applying standardized proof of concept structures to verify them. This validates findings before the final audit report is generated.