solidity-security

Review Solidity smart contracts for common vulnerabilities and secure coding patterns.

89|14|Updated Nov 15, 2025
One-click install
npx skills add https://github.com/HermeticOrmus/LibreUIUX-Claude-Code --skill solidity-security-hermeticormus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: solidity-security
Source: https://github.com/HermeticOrmus/LibreUIUX-Claude-Code/tree/main/plugins/blockchain-web3/skills/solidity-security
Command: npx skills add https://github.com/HermeticOrmus/LibreUIUX-Claude-Code --skill solidity-security-hermeticormus

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps developers write more secure Solidity smart contracts by identifying and mitigating common vulnerabilities, ensuring the integrity and safety of blockchain applications.

Core Features & Use Cases

  • Vulnerability Prevention: Learn to avoid critical issues like reentrancy, integer overflow/underflow, and access control flaws.
  • Secure Coding Patterns: Implement best practices such as Checks-Effects-Interactions and the Pull Over Push pattern.
  • Use Case: When developing a decentralized finance (DeFi) protocol, use this Skill to audit your contract code for potential exploits before deployment, preventing financial loss.

Quick Start

Use the solidity-security skill to review the attached contract 'MyToken.sol' for reentrancy vulnerabilities.

Frequently Asked Questions about solidity-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts for reentrancy vulnerabilities?

Prevent integer overflow and underflow in Solidity smart contracts by enforcing secure development patterns with strict input validation and arithmetic checks. This protects blockchain applications from unexpected state changes and potential financial exploitation.

What is the Pull Over Push pattern in secure Solidity development?

The Pull Over Push pattern in secure Solidity development is a design approach that mitigates cascading failures by requiring recipients to withdraw assets themselves rather than pushing transfers automatically. It isolates transaction risk in decentralized finance protocols.

How do I implement access control mechanisms in blockchain smart contracts?

Implement access control mechanisms in blockchain smart contracts by enforcing role-based permissions and input validation at the function level. This ensures only authorized addresses can execute privileged operations within your dApp's core logic.

Does this guidance cover securing NFT smart contracts or only DeFi protocols?

This guidance covers securing both NFT and DeFi smart contracts, providing comprehensive vulnerability mitigation applicable to any dApp functionality. It enforces secure coding practices across diverse blockchain token standards and decentralized applications.

What are the limitations of using secure coding patterns for smart contract auditing?

The limitations of using secure coding patterns for smart contract auditing include relying on known vulnerability models rather than detecting novel zero-day exploits. Developers must combine these patterns with external audits for comprehensive blockchain security.