security

Identify and mitigate security vulnerabilities in Solidity smart contracts.

Updated Mar 19, 2026
One-click install
npx skills add https://github.com/involvex/aetheris --skill security-involvex
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/involvex/aetheris/tree/main/.agents/skills/ethskills/security
Command: npx skills add https://github.com/involvex/aetheris --skill security-involvex

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Solidity security is often overlooked, leaving contracts vulnerable to reentrancy, decimal mishandling, approval exploits, and other practices that can cause real financial losses. This guide provides patterns and checklists to prevent such issues before deployment, and to review code for defensive implementations.

Core Features & Use Cases

  • Defensive coding patterns: CEI (Checks-Effects-Interations), SafeERC20 usage, reentrancy guards, access control.
  • Common vulnerabilities: reentrancy, decimals mismatches, unsafe delegatecall, improper approvals, and oracle manipulation.
  • Pre-deploy audit checklist: verify token decimals, input validation, event emission, upgradeability safety, and path to verification.

Quick Start

Review your Solidity contracts and apply the recommended security patterns before deployment.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts for reentrancy and decimal vulnerabilities?

To audit Solidity smart contracts, apply defensive coding patterns like Checks-Effects-Interactions and SafeERC20 to identify and mitigate reentrancy, decimal mishandling, and improper approvals before deployment.

What is the best way to secure Ethereum smart contracts against oracle manipulation?

Securing Ethereum smart contracts against oracle manipulation involves reviewing code for common vulnerabilities and applying defensive patterns, ensuring unsafe delegatecall and oracle inputs are properly validated.

Can I use this security checklist for reviewing upgradeable DeFi protocols?

Yes, you can use this security checklist for reviewing upgradeable DeFi protocols. It specifically verifies upgradeability safety, access control, and event emission for tokens and DeFi protocols.

What defensive coding patterns should I apply for pre-deploy smart contract audits?

For pre-deploy smart contract audits, apply defensive coding patterns including Checks-Effects-Interactions, SafeERC20 usage, reentrancy guards, and access control to enforce secure coding standards.

Why does my Solidity contract fail the pre-deploy audit checklist for token decimals?

Your Solidity contract fails the pre-deploy audit checklist because token decimals require explicit verification. The checklist ensures you verify token decimals, validate inputs, and confirm event emission.