security

Review Solidity smart contracts for vulnerabilities and security best practices.

246|51|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/austintgriffith/ethskills --skill security-austintgriffith
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/austintgriffith/ethskills/tree/main/security
Command: npx skills add https://github.com/austintgriffith/ethskills --skill security-austintgriffith

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses critical vulnerabilities in smart contract development, providing defensive code patterns and a pre-deployment checklist to prevent financial losses due to exploits.

Core Features & Use Cases

  • Vulnerability Mitigation: Learn to prevent common attacks like reentrancy, token decimal mishandling, and oracle manipulation with battle-tested code examples.
  • Pre-Deployment Audit: Utilize a comprehensive checklist to ensure all security best practices are met before deploying contracts.
  • Use Case: Before deploying a new DeFi protocol, use this Skill to review the Solidity code for potential reentrancy bugs and ensure proper access control is implemented.

Quick Start

Review the provided Solidity code for common vulnerabilities and security best practices.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent reentrancy attacks in Solidity smart contracts?

To prevent reentrancy attacks in Solidity smart contracts, apply defensive code patterns like the checks-effects-interactions structure. This Skill provides battle-tested examples to secure your functions against malicious external calls and draining contract funds.

What is a smart contract pre-deployment security checklist?

A smart contract pre-deployment security checklist is a comprehensive audit process to verify best practices before launch. This Skill provides a detailed checklist to review token decimal handling, access controls, and safe ERC20 interactions to prevent financial losses.

How do I secure oracle usage in DeFi protocols?

To secure oracle usage in DeFi protocols, implement defensive patterns against oracle manipulation. This Skill offers comprehensive guidance on securely integrating oracle data to prevent exploits like price feed tampering in your Solidity contracts.

What are the best automated security tools for auditing smart contracts?

The best automated security tools for auditing smart contracts are recommended by this Skill to validate code robustness. It suggests integrating these automated scanners alongside manual reviews to detect vulnerabilities and ensure comprehensive contract safety.

Why does token decimal mishandling cause vulnerabilities in Solidity?

Token decimal mishandling causes vulnerabilities in Solidity when calculations mismatch the underlying token's precision, leading to fund loss. This Skill explains how to properly handle token decimals and implement safe ERC20 interactions to mitigate this risk.

Can I use this Skill to review access control before deploying a new DeFi protocol?

Yes, you can use this Skill to review access control before deploying a new DeFi protocol. It provides a comprehensive pre-deployment audit checklist and vulnerability mitigation patterns specifically designed to secure Solidity contracts.