skills.rest
mashharuki
mashharukiCOMMUNITY
Explore all skills by this author →
Website𝕏@haruki_web3GitHub

security

Detect and explain Solidity smart contract security vulnerabilities with prioritized fixes.

Updated Apr 8, 2026
Search Tags:#security#audit#solidity#reentrancy#smart-contracts#oracle-safety#proxy-upgrades
One-click install
npx skills add https://github.com/mashharuki/flare-sample --skill security-mashharuki
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/mashharuki/flare-sample/tree/main/.claude/skills/eth-security
Command: npx skills add https://github.com/mashharuki/flare-sample --skill security-mashharuki

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and auditors find and fix critical Solidity vulnerabilities that can lead to real financial loss, replacing ad-hoc checks with a prioritized, defensive audit workflow.

Core Features & Use Cases

  • Defensive Patterns: Concrete guidance for reentrancy protection, CEI, SafeERC20 usage, token decimal handling, and MEV mitigation.
  • Hardening & Upgrades: Clear rules for proxy upgrade safety, storage layout discipline, initializer patterns, and delegatecall restrictions.
  • Pre-Deploy Audit Checklist: A comprehensive, actionable checklist covering access control, input validation, oracle and TWAP usage, infinite approvals, eventing, and automated tool runs (slither, mythril, fuzzing).
  • Use Cases: Pre-deploy review of DeFi contracts, secure design guidance for vaults and token bridges, code review training, and audit prep for multisig/upgradeable systems.

Quick Start

Review this Solidity contract and produce a prioritized pre-deploy security report listing critical vulnerabilities, exploitable code snippets, and exact code-level remediation steps.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts for reentrancy and oracle manipulation before deployment?▼

To audit Solidity smart contracts for reentrancy and oracle manipulation, review the codebase for checks-effects-interactions patterns and TWAP usage. This Skill generates a prioritized pre-deploy report highlighting exploitable snippets and exact remediation steps for these vulnerabilities.

What is the best way to secure proxy upgrade patterns and storage layout in upgradeable contracts?▼

Securing proxy upgrade patterns requires enforcing storage layout discipline and safe initializer patterns. This Skill evaluates delegatecall restrictions and proxy storage collisions, producing a checklist to harden upgradeable contracts against layout corruption.

Can I use this to check unsafe ERC20 token operations and decimal mishandling in DeFi protocols?▼

Yes, you can check unsafe ERC20 token operations and decimal mishandling in DeFi protocols. The Skill identifies non-compliant token transfers and decimal mismatches, recommending SafeERC20 usage and defensive patterns to prevent financial loss.

How do I generate a pre-deploy security checklist for smart contract access control and input validation?▼

Generating a pre-deploy security checklist involves verifying access controls, input validation, and event emissions. This Skill provides an actionable audit checklist covering these areas, plus automated tool run guidance for slither and mythril.

Does this audit process detect MEV risks and infinite approvals in token contracts?▼

The audit process detects MEV risks and infinite approvals by analyzing token contract logic for susceptible approval mechanisms and transaction ordering vulnerabilities. It delivers concrete defensive guidance and code-level fixes to mitigate these exploits.

What are the limitations of automated smart contract security checks for delegatecall risks?▼

Automated security checks for delegatecall risks are limited to pattern recognition and may miss complex contextual logic. This Skill supplements automated tools by explaining delegatecall vulnerabilities and providing prioritized manual code review steps.

Related Skills

Explore More Software Engineering Skills→
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced
nksethnkseth

security-reviewer

Identify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.

Community
Advanced
MolcajeteAIMolcajeteAI
2

security-audit

Conduct security audits of Solidity smart contracts with Slither and Mythril.

Official
Advanced
strawgatestrawgate

formal-coverage-audit

Audit formal verification coverage across TLA+, Kani, and proptest artifacts.

Community
Advanced