solidity-auditor

Audit Solidity repositories with parallel agents and gated vulnerability reports.

7|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/Zodomo/DrandVerifier --skill solidity-auditor-zodomo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solidity-auditor
Source: https://github.com/Zodomo/DrandVerifier/tree/main/.opencode/skills/pashov/solidity-auditor
Command: npx skills add https://github.com/Zodomo/DrandVerifier --skill solidity-auditor-zodomo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Solidity-auditor accelerates smart-contract security review by surfacing high-confidence vulnerabilities quickly, so teams can fix issues before weeks-long audits.

Core Features & Use Cases

  • Parallel multi-agent auditing: runs multiple specialized analysis passes (vector scan, access control, math precision, invariants, periphery) over an in-scope Solidity code set.
  • Repeatable report generation: produces a structured Findings/Leads report with confidence-based gating and consistent formatting.
  • Focused workflow: supports full-repo scans using an exclude pattern or targeted checks on specific files to increase signal on hot areas.
  • Repeat validation: re-reads previously saved findings assets and indicates whether issues remain.

Quick Start

Run solidity-auditor in the repo you want to review by executing it against the default scope to get a first Findings/Leads report immediately.

Frequently Asked Questions about solidity-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a fast security audit on Solidity smart contracts?

You can perform a fast security audit of Solidity smart contracts by executing the skill in your repository to orchestrate parallel, specialized agents that scan for vulnerabilities and generate a deduplicated findings report.

What is multi-agent static analysis for smart contract code review?

Multi-agent static analysis for smart contract code review involves running specialized analysis passes, such as vector scanning and access control checks, in parallel over in-scope .sol files to discover high-confidence vulnerabilities.

Can I scan specific Solidity files instead of an entire repository?

Yes, you can scan specific Solidity files by running targeted checks on filenames to increase signal on hot areas, or you can execute full-repo scans using deterministic rules and exclude patterns for non-core directories.

How does vulnerability deduplication work during a smart contract security audit?

Vulnerability deduplication works by re-reading previously saved findings assets and passing them through four sequential judging gates to filter out duplicate reports and produce high-confidence results.

What are the limitations of automated code review for Solidity vulnerabilities?

Automated code review for Solidity vulnerabilities is limited to deterministic scanning rules applied to in-scope .sol files, excluding common non-core directories, and relies on confidence-based gating rather than exhaustive manual verification.