smart-contracts

Build and secure Stellar smart contracts in Rust with soroban-sdk.

3|1|Updated May 12, 2026
One-click install
npx skills add https://github.com/LumenWipe/lumenwipe --skill smart-contracts
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: smart-contracts
Source: https://github.com/LumenWipe/lumenwipe/tree/main/.claude/skills/smart-contracts
Command: npx skills add https://github.com/LumenWipe/lumenwipe --skill smart-contracts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers build, test, review, secure, debug, and deploy Stellar smart contracts without overlooking Soroban platform constraints, authorization requirements, storage lifetimes, resource limits, or common vulnerabilities.

Core Features & Use Cases

  • Contract Development: Set up Rust projects, design contract anatomy, implement storage, authorization, tokens, events, errors, upgrades, factories, and DeFi patterns.
  • Testing and Deployment: Cover unit, integration, fuzz, property, fork, mutation, and resource tests, then build and deploy optimized WebAssembly contracts with the Stellar CLI.
  • Security Review: Identify missing authorization, reinitialization, arbitrary contract calls, arithmetic errors, TTL failures, token integration risks, resource exhaustion, and custom-account vulnerabilities.
  • Use Case: When creating a Soroban lending contract, use this Skill to implement durable storage and authorization, test cross-contract token flows, profile resource usage, and complete a production security checklist before mainnet deployment.

Quick Start

Use the smart-contracts skill to design, test, security-review, and prepare my Stellar Soroban contract for deployment.

Frequently Asked Questions about smart-contracts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build and secure Stellar smart contracts written in Rust with soroban-sdk?

To build and secure Stellar smart contracts in Rust with soroban-sdk, set up a no_std-compatible WebAssembly project, implement explicit authorization and TTL-aware storage, then run comprehensive unit, integration, and fuzz tests before deploying via the Stellar CLI.

What security vulnerabilities should I check for when reviewing Soroban smart contracts?

When reviewing Soroban smart contracts, check for missing authorization, reinitialization flaws, arbitrary contract calls, arithmetic errors, TTL storage failures, token integration risks, resource exhaustion, and custom-account vulnerabilities to ensure production readiness.

How do I handle storage and TTL limits in Stellar Soroban contracts?

Stellar Soroban contracts require TTL-aware storage design with bounded resource usage, meaning you must explicitly manage durable storage lifetimes and profile storage footprint during simulation to avoid runtime failures on mainnet.

Can I use this to test cross-contract token flows for a Soroban DeFi lending contract?

Yes, you can test cross-contract token flows for Soroban DeFi lending contracts by implementing integration and fork tests that simulate token interactions, profile resource usage, and validate authorization before completing a production security checklist.

What's the best way to deploy optimized WebAssembly contracts to Stellar mainnet?

The best way to deploy optimized WebAssembly contracts to Stellar mainnet is to build with protocol-aligned soroban-sdk versions, run simulation and resource tests, verify bounded resource usage, then deploy the compiled artifact using the Stellar CLI.

Why does my Soroban contract authorization fail during cross-contract calls?

Soroban contract authorization often fails during cross-contract calls when explicit authorization is not implemented for every invoked function, requiring you to enforce authorization checks across all contract entry points and test them with simulation.