vulnerability-checklist

Guide smart contract audits with a structured vulnerability checklist.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/phpmac/foundry --skill vulnerability-checklist
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-checklist
Source: https://github.com/phpmac/foundry/tree/main/.claude/skills/vulnerability-checklist
Command: npx skills add https://github.com/phpmac/foundry --skill vulnerability-checklist

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This checklist helps auditors systematically identify common smart contract vulnerabilities during code review and security assessments.

Core Features & Use Cases

  • Structured vulnerability categories: covers arithmetic vulnerabilities, overflow risks, unchecked operations, and related threat areas with references for remediation.
  • Guided testing practices: suggests static analysis, fuzzing, and manual review workflows to ensure thorough coverage.
  • Use Case: during an audit, apply the checklist to ensure critical categories are evaluated and documented.

Quick Start

Run the vulnerability-checklist during a contract audit to systematically identify and document arithmetic, overflow, and unchecked operation risks.

Frequently Asked Questions about vulnerability-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a smart contract security audit checklist used for?

A smart contract security audit checklist systematically guides code reviews and threat modeling to identify arithmetic vulnerabilities, overflow risks, and unchecked operations. It ensures critical categories are evaluated and documented with actionable remediation steps.

How do I audit Solidity smart contracts for arithmetic overflow and unchecked operations?

To audit Solidity smart contracts for arithmetic overflow and unchecked operations, apply a structured vulnerability checklist during code review. This guides static analysis and manual testing workflows to ensure thorough coverage and document remediation steps.

Does this vulnerability checklist require external static analysis tools to function?

This vulnerability checklist requires no external tools beyond standard static analysis and testing practices. It provides a structured framework applied during code reviews to map identified risks to actionable remediation steps.

Can I use a security audit checklist for threat modeling and manual code reviews?

Yes, you can use this security audit checklist during threat modeling and manual code reviews to systematically document smart contract vulnerabilities. It suggests workflows combining static analysis, fuzzing, and manual review to ensure thorough coverage.

What is the best way to document smart contract vulnerability findings during an audit?

The best way to document smart contract vulnerability findings is applying a structured checklist that maps identified arithmetic, overflow, and unchecked operation risks to actionable remediation steps. This ensures critical categories are systematically evaluated and recorded.