smart-contract-security

Audit Solidity smart contracts for vulnerabilities and generate prioritized security assessments.

1|Updated Nov 18, 2025
One-click install
npx skills add https://github.com/pluginagentmarketplace/custom-plugin-blockchain --skill smart-contract-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: smart-contract-security
Source: https://github.com/pluginagentmarketplace/custom-plugin-blockchain/tree/main/skills/smart-contract-security
Command: npx skills add https://github.com/pluginagentmarketplace/custom-plugin-blockchain --skill smart-contract-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Security teams and smart-contract developers often struggle to consistently identify vulnerabilities, misconfigurations, and incident-ready gaps across Solidity-based contracts, leading to costly exploits or outages.

Core Features & Use Cases

  • Auditing Methodology: Manual review, static analysis, fuzzing, and formal verification workflows to uncover vulnerabilities.
  • Vulnerability Coverage: Focus areas include reentrancy, access control, oracle manipulation, and integer issues with clear remediation guidance.
  • Incident Response Guidance: Triage, mitigation, and post-mortem recommendations to shorten mean time to containment and recovery.

Quick Start

Run the smart-contract-security audit by selecting a topic (vulnerabilities, auditing, tools, incidents) and a severity (critical, high, medium, low, all) to generate a prioritized security assessment.

Frequently Asked Questions about smart-contract-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for reentrancy and access control vulnerabilities?

To audit smart contracts for reentrancy and access control vulnerabilities, this skill provides manual review, static analysis, and fuzzing workflows to detect issues and generate clear remediation guidance for your Solidity code.

What is the best way to detect Solidity security vulnerabilities before deployment?

The best way to detect Solidity security vulnerabilities before deployment is combining static analysis with formal verification workflows, which this skill targets to uncover oracle manipulation, integer issues, and other critical flaws.

How should I handle an active smart contract exploit or security incident?

Handling an active smart contract exploit requires incident response guidance for triage and mitigation, which this skill provides to shorten mean time to containment and recovery along with post-mortem recommendations.

Can I use static analysis tools to find integer issues in Solidity smart contracts?

Yes, you can use static analysis tools to find integer issues in Solidity smart contracts, as this skill supports tool-assisted analysis workflows covering integer vulnerabilities, reentrancy, and oracle manipulation.

Do I need formal verification to secure my smart contracts against oracle manipulation?

Formal verification is not strictly required to secure smart contracts against oracle manipulation, as this skill combines fuzzing, static analysis, and manual review methodologies to comprehensively identify and mitigate such vulnerabilities.

Why does my smart contract security audit miss access control flaws during static analysis?

Smart contract security audits may miss access control flaws during static analysis if tool-assisted analysis lacks manual review coverage, which this skill addresses by integrating both approaches for thorough vulnerability detection.