Skills solidity-security
📦

solidity-security

Content revision r1 Safe ⚡ Contains scripts⚙️ External commands

Audit Solidity Contracts Securely

Smart contracts fail when common vulnerabilities are missed before deployment. This skill guides Claude, Codex, and Claude Code through focused Solidity security reviews.

Supports: Claude Codex Code(CC)
🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "solidity-security" from https://skillstore.io/skills/sickn33-solidity-security.md and its manifest at https://skillstore.io/api/skills/sickn33-solidity-security/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-solidity-security.md Signed manifest GET /api/skills/sickn33-solidity-security/manifest Signed lockfile GET /api/skills/sickn33-solidity-security/lockfile

Test it

Using "solidity-security". Review a token withdrawal function before deployment.

Expected outcome:

  • Flags external calls that happen before state updates.
  • Recommends checks-effects-interactions and ReentrancyGuard.
  • Adds tests for repeated withdrawals and failed transfers.

Using "solidity-security". Prepare audit notes for a DeFi swap contract.

Expected outcome:

  • Lists roles, external dependencies, and privileged functions.
  • Highlights front-running and slippage checks.
  • Suggests invariants and scenario tests for the audit package.

Using "solidity-security". Improve a contract for safer production deployment.

Expected outcome:

  • Prioritizes access control, input validation, and emergency stop behavior.
  • Separates critical fixes from optional gas improvements.
  • Explains verification steps for each recommendation.

Security Audit

Safe
v5 • 7/7/2026 Open versioned report

All static findings appear to be false positives from Markdown documentation and Solidity code examples. The Solidity require statements are not JavaScript dynamic imports, and the SKILL.md backticks mark resource paths rather than shell execution. No prompt injection or malicious intent was found in the reviewed files.

2
Files scanned
560
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚡ Contains scripts (19)
resources/implementation-playbook.md:37 resources/implementation-playbook.md:52 resources/implementation-playbook.md:59 resources/implementation-playbook.md:74 resources/implementation-playbook.md:79 resources/implementation-playbook.md:164 resources/implementation-playbook.md:184 resources/implementation-playbook.md:210 resources/implementation-playbook.md:226 resources/implementation-playbook.md:227 resources/implementation-playbook.md:234 resources/implementation-playbook.md:252 resources/implementation-playbook.md:276 resources/implementation-playbook.md:277 resources/implementation-playbook.md:278 resources/implementation-playbook.md:279 resources/implementation-playbook.md:474 resources/implementation-playbook.md:485 resources/implementation-playbook.md:492
⚙️ External commands (2)
SKILL.md:30 SKILL.md:34
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-solidity-security/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-solidity-security/security.svg)](https://skillstore.io/skills/sickn33-solidity-security?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-solidity-security?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-solidity-security/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-solidity-security.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). solidity-security security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-solidity-security/audits/5

BibTeX citation

@techreport{sickn33-sickn33-solidity-security-2026, author = {sickn33}, title = {solidity-security security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-solidity-security/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "solidity-security security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-07" url: "https://skillstore.io/skills/sickn33-solidity-security/audits/5" identifiers: - type: other value: "skillstore:sickn33-solidity-security:audit:5" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
sickn33 Recommended Current

sickn33-solidity-security

Skillstore Score 78
Evidence Confidence High
Skillstore usage 14
Updated

2026-08-21

wshobson

wshobson-solidity-security

Skillstore Score 77
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Review DeFi Contract Changes

Check withdrawal, swap, and payment flows before testnet or mainnet deployment.

Prepare Pre-Audit Notes

Build a checklist of roles, external calls, invariants, and known risk areas.

Set Team Security Standards

Create practical guidance for safe Solidity patterns and required tests.

Try These Prompts

Check Basic Risks 
Review this Solidity contract for reentrancy, overflow, access control, and input validation. Explain each issue in plain language and suggest safer patterns.
Harden Payment Flow 
Analyze this withdrawal or payout flow. Apply checks-effects-interactions, pull over push, and failure handling. List exact changes and tests to add.
Prepare Audit Checklist 
Build a pre-audit checklist for this protocol. Include threat assumptions, privileged roles, external calls, upgrade paths, and test coverage gaps.
Model DeFi Attack Paths 
Assess this DeFi design for front-running, slippage, oracle, reentrancy, and access-control risks. Rank findings by exploitability and propose mitigations.

Best Practices

  • Provide contract source, compiler version, dependencies, and deployment chain.
  • Ask for severity ranking, exploit scenarios, and concrete verification steps.
  • Pair every mitigation with tests, invariants, or audit notes.

Avoid

  • Requesting final approval without full source and threat assumptions.
  • Copying example patterns without adapting roles, invariants, and dependencies.
  • Prioritizing gas optimization over exploit resistance and clear access control.

Frequently Asked Questions

Can this skill audit production smart contracts?
It can support review and preparation, but it does not replace a professional audit.
Which vulnerabilities does it focus on?
It focuses on reentrancy, overflow, access control, input validation, front-running, and unsafe external calls.
Can it run security tools automatically?
No. It can recommend tools and tests, but execution depends on the host environment.
Does it support DeFi protocols?
Yes. It includes guidance for swaps, payments, slippage, front-running, and protocol audit preparation.
What input gives the best results?
Provide source code, dependencies, compiler version, deployment target, roles, and known assumptions.
Can it help after an audit?
Yes. It can help interpret findings, plan fixes, and define regression tests.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/solidity-security

Ref

9f814fc6a43fd99946f2da5e0df231c65a38bc76

Maintenance freshness

7/18/2026

Usage

8 downloads · 128 views

File structure

📁 resources/

📄 implementation-playbook.md

📄 SKILL.md