security

Review Solidity smart contracts for vulnerabilities and pre-deployment audit checks.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/freeslugs/unlink-hackathon --skill security-freeslugs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/freeslugs/unlink-hackathon/tree/main/_skills/eth-skills/security
Command: npx skills add https://github.com/freeslugs/unlink-hackathon --skill security-freeslugs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides essential knowledge and a practical checklist to prevent common and critical vulnerabilities in Solidity smart contracts, safeguarding against financial losses and exploits.

Core Features & Use Cases

  • Vulnerability Identification: Details critical risks like reentrancy, token decimal issues, and oracle manipulation with defensive code examples.
  • Pre-Deploy Audit Checklist: A comprehensive list of checks to perform before deploying any contract.
  • Use Case: Before deploying a new DeFi protocol, use this Skill to review the codebase against common attack vectors and ensure all security best practices are followed.

Quick Start

Review the provided smart contract code for reentrancy vulnerabilities and ensure all token decimal handling is correct.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for reentrancy and oracle manipulation vulnerabilities?

To audit smart contracts for reentrancy and oracle manipulation, review your codebase against common attack vectors using defensive code implementations. This process identifies critical risks and ensures proper access control before deployment.

What is included in a pre-deployment audit checklist for Solidity smart contracts?

A pre-deployment audit checklist for Solidity smart contracts includes verifying reentrancy guards, token decimal handling, oracle manipulation risks, access control, delegatecall risks, and EIP-712 signature implementations to safeguard against exploits.

How do I prevent reentrancy attacks in my Solidity smart contracts?

Prevent reentrancy attacks in Solidity smart contracts by applying defensive code patterns like the checks-effects-interactions pattern. Reviewing your codebase against these known vulnerabilities ensures safe state updates before external calls.

Does this security guidance cover upgradeability patterns and EIP-712 signatures?

Yes, this security guidance covers upgradeability patterns and EIP-712 signatures. It details how to implement these securely while addressing associated delegatecall risks to maintain safe contract upgradeability.

What are the common token decimal variations risks when developing DeFi protocols?

Common token decimal variations risks in DeFi protocols cause calculation errors and financial exploits. Address these risks by ensuring all token decimal handling is correct and validating inputs against expected decimal values.

How do I use automated security tooling for blockchain vulnerability identification?

Use automated security tooling for blockchain vulnerability identification by scanning your codebase to detect common risks. This supplements manual reviews of access control and oracle manipulation to secure smart contracts before deployment.