solidity-auditor

Name: solidity-auditor
Availability: InStock
Author: Zodomo

Audit Solidity repositories with parallel agents and gated vulnerability reports.

7|Updated Apr 4, 2026

Search Tags:#static analysis #code review #vulnerability discovery #security audit #agent orchestration #smart contracts #solidity

Ready to run

npx skills add https://github.com/Zodomo/DrandVerifier --skill solidity-auditor-zodomo

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: solidity-auditor
Source: https://github.com/Zodomo/DrandVerifier/tree/main/.opencode/skills/pashov/solidity-auditor
Command: npx skills add https://github.com/Zodomo/DrandVerifier --skill solidity-auditor-zodomo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Solidity-auditor accelerates smart-contract security review by surfacing high-confidence vulnerabilities quickly, so teams can fix issues before weeks-long audits.

Core Features & Use Cases

Parallel multi-agent auditing: runs multiple specialized analysis passes (vector scan, access control, math precision, invariants, periphery) over an in-scope Solidity code set.
Repeatable report generation: produces a structured Findings/Leads report with confidence-based gating and consistent formatting.
Focused workflow: supports full-repo scans using an exclude pattern or targeted checks on specific files to increase signal on hot areas.
Repeat validation: re-reads previously saved findings assets and indicates whether issues remain.

Quick Start

Run solidity-auditor in the repo you want to review by executing it against the default scope to get a first Findings/Leads report immediately.

Frequently Asked Questions about solidity-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a fast security audit on Solidity smart contracts?▼

You can perform a fast security audit of Solidity smart contracts by executing the skill in your repository to orchestrate parallel, specialized agents that scan for vulnerabilities and generate a deduplicated findings report.

What is multi-agent static analysis for smart contract code review?▼

Multi-agent static analysis for smart contract code review involves running specialized analysis passes, such as vector scanning and access control checks, in parallel over in-scope .sol files to discover high-confidence vulnerabilities.

Can I scan specific Solidity files instead of an entire repository?▼

Yes, you can scan specific Solidity files by running targeted checks on filenames to increase signal on hot areas, or you can execute full-repo scans using deterministic rules and exclude patterns for non-core directories.

How does vulnerability deduplication work during a smart contract security audit?▼

Vulnerability deduplication works by re-reading previously saved findings assets and passing them through four sequential judging gates to filter out duplicate reports and produce high-confidence results.

What are the limitations of automated code review for Solidity vulnerabilities?▼

Automated code review for Solidity vulnerabilities is limited to deterministic scanning rules applied to in-scope .sol files, excluding common non-core directories, and relies on confidence-based gating rather than exhaustive manual verification.