smart-contract-audit

Audit Solidity smart contracts for high-severity loss-of-funds vulnerabilities.

1|Updated Mar 6, 2014
One-click install
npx skills add https://github.com/79yuuki/dotfiles --skill smart-contract-audit-79yuuki
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: smart-contract-audit
Source: https://github.com/79yuuki/dotfiles/tree/main/claude/skills/smart-contract-audit
Command: npx skills add https://github.com/79yuuki/dotfiles --skill smart-contract-audit-79yuuki

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires slither-analyzer, solc-select, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security reviewers identify high-impact smart contract vulnerabilities that could cause loss of funds before contracts are deployed or merged.

Core Features & Use Cases

  • Solidity Security Auditing: Reviews contracts for reentrancy, access control flaws, oracle manipulation, token handling issues, upgradeability risks, and logic vulnerabilities.
  • Automated Analysis Workflow: Runs Slither-based static analysis and combines results with manual review guidance based on established vulnerability patterns.
  • Audit Reporting: Produces structured EVMbench-format reports with validated JSON vulnerability findings and remediation details.

Quick Start

Use the smart-contract-audit skill to audit the Solidity contracts in the specified directory and generate a validated high-severity vulnerability report.

Frequently Asked Questions about smart-contract-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts for loss-of-funds vulnerabilities before deployment?

To audit Solidity smart contracts for loss-of-funds vulnerabilities, this Skill runs Slither-based static analysis and manual review to identify reentrancy, access control flaws, and logic issues. It generates validated EVMbench-format reports with JSON findings and remediation details.

What types of high-severity vulnerabilities can a smart contract security audit detect?

A smart contract security audit detects high-severity vulnerabilities including reentrancy, access control flaws, oracle manipulation, token handling issues, upgradeability risks, and logic flaws that could cause loss of funds before EVM contract deployment.

Do I need Slither and solc-select installed to perform a Solidity vulnerability analysis?

Yes, you need the slither-analyzer and solc-select dependencies installed to perform Solidity vulnerability analysis. The automated analysis workflow runs Slither-based static analysis and combines results with manual review guidance.

Can I use this static analysis workflow for EVM contracts before a protocol release or code merge?

Yes, this static analysis workflow is designed for authorized security reviews of EVM contracts before protocol releases, code merges, and deployments. It identifies high-impact vulnerabilities that could cause loss of funds.

How does automated Slither static analysis compare to manual smart contract review?

Automated Slither static analysis identifies established vulnerability patterns quickly, while manual smart contract review provides deeper logic validation. This Skill combines both approaches to produce structured EVMbench-format reports with validated JSON vulnerability findings.

What is the EVMbench-format reporting workflow for smart contract audits?

The EVMbench-format reporting workflow produces structured reports containing validated JSON vulnerability findings and remediation details. It is the output format generated after running Slither static analysis and manual review on Solidity smart contracts.