slither

Perform static analysis on Solidity and Vyper smart contracts to detect vulnerabilities.

4|1|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/hairyf/blockchain-skills --skill slither
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: slither
Source: https://github.com/hairyf/blockchain-skills/tree/main/skills/slither
Command: npx skills add https://github.com/hairyf/blockchain-skills --skill slither

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify vulnerabilities, understand complex smart contract code, and ensure code quality through static analysis.

Core Features & Use Cases

  • Vulnerability Detection: Automatically finds common security flaws in Solidity and Vyper code.
  • Code Comprehension: Visualizes contract structure, including call graphs, CFGs, and inheritance.
  • Use Case: Before deploying a new smart contract, run Slither to automatically detect potential reentrancy bugs, integer overflows, and other critical vulnerabilities, ensuring a more secure codebase.

Quick Start

Use the slither skill to analyze the current directory for security vulnerabilities.

Frequently Asked Questions about slither

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect vulnerabilities in Solidity smart contracts before deployment?

Static analysis detects vulnerabilities in Solidity smart contracts by automatically scanning code to find reentrancy bugs, integer overflows, and other security flaws before deployment. This automated security check ensures a more secure codebase.

Can I visualize the call graph and inheritance structure of Vyper code?

Yes, you can visualize Vyper code structure by generating contract call graphs, control flow graphs (CFGs), and inheritance diagrams. This code comprehension feature helps developers understand complex smart contract architectures and execution flows.

Does static analysis work with Vyper or is it only for Solidity contracts?

Static analysis supports both Solidity and Vyper smart contracts for vulnerability detection and code structure analysis. You can run automated security checks and visualize contract architecture across both programming languages.

How do I integrate smart contract security analysis into a CI/CD pipeline?

You can integrate static analysis into CI/CD pipelines to perform automated security checks on smart contracts during development. This continuously detects vulnerabilities and ensures code quality before contracts reach production environments.

How do I run custom security analysis on a smart contract using Python?

You can perform custom static analysis on smart contracts by utilizing the Python API and SlithIR to write tailored vulnerability detection scripts. This allows developers to code specific security checks beyond the default automated detectors.