skills.rest
utsavthakur
utsavthakurCOMMUNITY
Explore all skills by this author →
GitHub

smart-contract-vulnerabilities

Identify and mitigate vulnerabilities in Solidity/EVM smart contracts.

Updated Jun 11, 2026
Search Tags:#security#vulnerability#audit#smart contract#Solidity#EVM
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill smart-contract-vulnerabilities-utsavthakur
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: smart-contract-vulnerabilities
Source: https://github.com/utsavthakur/agenticskills/tree/main/smart-contract-vulnerabilities
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill smart-contract-vulnerabilities-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides expert-level audit techniques for identifying and mitigating vulnerabilities in Solidity/EVM smart contracts.

Core Features & Use Cases

  • Reentrancy Detection: Identifies reentrancy vulnerabilities in smart contracts.
  • Integer Overflow/Underflow: Detects arithmetic vulnerabilities that can lead to overflow or underflow.
  • Access Control: Audits access control issues in smart contracts.
  • Randomness Manipulation: Analyzes the predictability of randomness in smart contracts.
  • Delegatecall Vulnerabilities: Identifies storage layout collisions and function selector collisions.
  • Front-running/MEV: Protects against front-running and MEV-related attacks.
  • Signature Replay: Mitigates risks associated with signature replay attacks.
  • Self-destruct & Force-send ETH: Audits contracts for potential self-destruct and force-send vulnerabilities.
  • CREATE2 & Deterministic Address Exploitation: Identifies vulnerabilities related to CREATE2 and deterministic address generation.
  • Flash Loan Attacks: Detects flash loan attack patterns in smart contracts.
  • Short Address Attacks: Mitigates risks associated with short address attacks.
  • Tools: Provides a list of tools for static analysis, symbolic execution, fuzzing, and formal verification.
  • Decision Tree: Offers a step-by-step guide for auditing smart contracts.
  • Code Reference: Provides side-by-side vulnerable vs fixed code patterns for various vulnerabilities.

Quick Start

Load the smart-contract-vulnerabilities skill to begin auditing your smart contracts for common security issues.

Frequently Asked Questions about smart-contract-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solidity smart contract for reentrancy and integer overflow vulnerabilities?▼

To audit a Solidity smart contract for reentrancy and integer overflow vulnerabilities, use expert audit techniques that identify common attack patterns. This process analyzes vulnerable code side-by-side with fixed patterns to mitigate arithmetic and reentrancy risks.

What is the best way to detect flash loan attacks and front-running MEV in EVM smart contracts?▼

The best way to detect flash loan attacks and front-running MEV in EVM smart contracts is to analyze transaction ordering and dependency patterns. This Skill identifies MEV-related attack vectors and provides mitigation strategies for secure execution.

How do I mitigate signature replay and short address attacks in smart contracts?▼

Mitigating signature replay and short address attacks requires analyzing contract input validation and signature verification logic. This Skill detects these vulnerabilities and provides specific code reference patterns to secure the contract.

Can I use static analysis and fuzzing tools to find delegatecall and CREATE2 vulnerabilities?▼

Yes, you can use static analysis, symbolic execution, and fuzzing tools to find delegatecall and CREATE2 vulnerabilities. This Skill provides a curated list of these tools to identify storage collisions and deterministic address exploitation.

Do I need knowledge of access control principles to audit randomness manipulation in smart contracts?▼

Yes, you need knowledge of smart contract security principles to effectively audit randomness manipulation and access control. This Skill requires prerequisite understanding of common attack patterns to properly analyze predictability issues.

Why does my smart contract audit miss self-destruct and force-send ETH vulnerabilities?▼

Your smart contract audit may miss self-destruct and force-send ETH vulnerabilities if the review process lacks a structured decision tree. This Skill offers a step-by-step auditing guide to systematically identify these edge-case attack vectors.

Related Skills

Explore More Software Engineering Skills→
LuisSambranoLuisSambrano
7

evm-hardhat

Develop, test, and deploy Solidity smart contracts on EVM chains with Hardhat.

Community
Intermediate
PriyanshKuniyalPriyanshKuniyal

solidity-security

Audit Solidity smart contracts for reentrancy, overflow, and access control vulnerabilities.

Community
Advanced
lNwNllNwNl
2

smart-contract-vulnerabilities

Identify high-impact security issues in Solidity and EVM smart contracts.

Community
Advanced
telihateliha

Smart Contract Security Audit

Audit Solidity smart contracts for security vulnerabilities and generate Markdown reports.

Official
Advanced