smart-contract-auditor

You can run a smart contract security audit by providing a target contract address. The Skill queries free sources like Sourcify, Blockscout, GoPlus, and 4byte.directory to generate a structured risk report without requiring any API keys.

Yes, this tool supports Solidity contracts across Ethereum-compatible networks. It applies source verification checks and function signature decoding to analyze contracts deployed on these chains.

Function signature decoding works by querying 4byte.directory to match function selectors against known signatures. This process helps identify what each function does and contributes to the overall risk scoring of the contract.

Yes, you can use this for pre-deployment reviews, code reviews, and governance analyses in enterprise environments. It combines source verification and multi-source risk data to produce an end-to-end security report.

The best way to verify source code is by inputting the contract address and letting the Skill fetch verification data from Sourcify and Blockscout. This returns a structured risk report containing the verified source code checks.

Yes, if a smart contract has unverified source code, the Skill may rely entirely on function signature decoding and multi-source risk data from GoPlus and 4byte.directory, limiting the depth of the source verification checks.