smart-contract-auditor

Analyze Solidity smart contracts and generate structured security risk reports.

17|45|Updated Jan 23, 2026

Search Tags:#multi-source #solidity #security-audit #smart-contract #source-verification #abi-analysis

Ready to run

npx skills add https://github.com/XSpoonAi/spoon-awesome-skill --skill smart-contract-auditor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: smart-contract-auditor
Source: https://github.com/XSpoonAi/spoon-awesome-skill/tree/main/enterprise-skills/code-review/smart-contract-auditor
Command: npx skills add https://github.com/XSpoonAi/spoon-awesome-skill --skill smart-contract-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automates comprehensive smart contract security analysis by combining source verification, function signature intelligence, and multi-source risk data.

Core Features & Use Cases

Source code verification checks from Sourcify/Blockscout.
Function signature decoding and risk scoring via 4byte.directory and multi-source data.
End-to-end security reporting for audits, reviews, and pre-deployment checks.

Quick Start

Run the audit against a target contract address to generate a structured security report.

Frequently Asked Questions about smart-contract-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a smart contract security audit without an API key?▼

You can run a smart contract security audit by providing a target contract address. The Skill queries free sources like Sourcify, Blockscout, GoPlus, and 4byte.directory to generate a structured risk report without requiring any API keys.

Does this tool support Solidity contracts on Ethereum-compatible networks?▼

Yes, this tool supports Solidity contracts across Ethereum-compatible networks. It applies source verification checks and function signature decoding to analyze contracts deployed on these chains.

How does function signature decoding work for smart contract security analysis?▼

Function signature decoding works by querying 4byte.directory to match function selectors against known signatures. This process helps identify what each function does and contributes to the overall risk scoring of the contract.

Can I use this for pre-deployment reviews and enterprise code reviews?▼

Yes, you can use this for pre-deployment reviews, code reviews, and governance analyses in enterprise environments. It combines source verification and multi-source risk data to produce an end-to-end security report.

What is the best way to verify smart contract source code from an address?▼

The best way to verify source code is by inputting the contract address and letting the Skill fetch verification data from Sourcify and Blockscout. This returns a structured risk report containing the verified source code checks.

Are there limitations when analyzing smart contracts with unverified source code?▼

Yes, if a smart contract has unverified source code, the Skill may rely entirely on function signature decoding and multi-source risk data from GoPlus and 4byte.directory, limiting the depth of the source verification checks.