weasel-analyzer

Analyze Solidity smart contracts for security vulnerabilities and quality issues.

30|2|Updated Nov 8, 2025
One-click install
npx skills add https://github.com/slvDev/weasel --skill weasel-analyzer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: weasel-analyzer
Source: https://github.com/slvDev/weasel/tree/main/weasel/skills/weasel-analyzer
Command: npx skills add https://github.com/slvDev/weasel --skill weasel-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables automated static analysis and security review of Solidity smart contracts to identify vulnerabilities, security gaps, and quality issues with context-aware reporting.

Core Features & Use Cases

  • Quick Scan Workflow: Run a fast, deterministic analysis to surface high-priority issues.
  • Full Audit Workflow: Combine automated findings with manual review guidance for thorough security assessments.
  • Context-aware Recommendations: Maintains smart context during analysis to minimize false positives and preserve reasoning traceability.
  • Use Case: Ideal for auditing individual contracts or entire repositories before deployment or audits.

Quick Start

Use the weasel_analyze command to start a quick scan of a project, then inspect the compact results and follow up with detailed findings if needed.

Frequently Asked Questions about weasel-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a static analysis security audit on Solidity smart contracts?

The Skill performs automated static analysis on Solidity smart contracts to identify vulnerabilities and quality issues, supporting quick scans, full audits, and manual review workflows with structured findings and remediation guidance.

Can I scan an entire repository of Solidity files for vulnerabilities at once?

Yes, this Skill is applicable to entire repositories, allowing you to scan all included Solidity smart contracts to identify security vulnerabilities and quality issues before deployment.

Do I need the Weasel tool installed to analyze Solidity code?

Yes, the Weasel tool must be installed and configured beforehand, as this Skill relies on it to execute the static analysis that outputs structured findings and recommended fixes.

What is the difference between a quick scan and a full audit for smart contract security?

A quick scan runs fast, deterministic analysis to surface high-priority issues, while a full audit combines automated findings with manual review guidance for thorough security assessments of Solidity smart contracts.

How does context-aware analysis reduce false positives in Solidity code reviews?

Context-aware analysis maintains smart context during the review process to minimize false positives and preserve reasoning traceability when identifying security gaps in Solidity smart contracts.

What kind of output does a Solidity static security analysis generate?

The static analysis outputs structured findings, recommended fixes, and role-based remediation guidance, providing clear actions to resolve identified vulnerabilities in Solidity smart contracts.