Solidity Security Audit

Comprehensive Solidity smart contract security auditing and vulnerability analysis skill. Based on methodologies from Trail of Bits, OpenZeppelin, Consensys Diligence, Sherlock, CertiK, Cyfrin, Spearbit, Halborn, and other leading Web3 security firms. This skill should be used whenever the user asks to "audit a smart contract", "review Solidity code for security", "find vulnerabilities", "check for reentrancy", "analyze gas optimization", "review access control", "check proxy patterns", "analyze DeFi protocol security", "review ERC20/ERC721 implementation", "check oracle manipulation risks", "

6 stars 2 forksSecurity

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add mariano-aguero/solidity-security-audit-skill --skill solidity-security-audit

Manual install

git clone --depth 1 https://github.com/mariano-aguero/solidity-security-audit-skill.git /tmp/solidity-security-audit-skill
mkdir -p ~/.claude/skills
cp -r /tmp/solidity-security-audit-skill/. ~/.claude/skills/solidity-security-audit

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Solidity Security Audit Skill

## Purpose

Perform professional-grade smart contract security audits following methodologies
established by the world's leading Web3 security firms. Produce actionable,
severity-classified findings with remediation guidance.

## Context Gathering — When Code Arrives Without Scope

**Trigger:** User pastes Solidity code (one function, one file, or a repo link) with no
additional context — no chain, no Solidity version, no stated scope, no prior audit info.

Do NOT start auditing immediately. Missing context causes wrong severity ratings,
irrelevant findings (e.g., flagging L2 issues on mainnet-only code), and wasted effort.
Ask the following questions **in a single message** before proceeding.

### Required Context (block until answered)

Ask these as a short numbered list — not a form, not a table:

Read the full skill on GitHub

Details

Skill name: solidity-security-audit
Repository: mariano-aguero/solidity-security-audit-skill
License: MIT
Repo updated: 12 May 2026

FAQ

What does the Solidity Security Audit skill do?

How do I install the Solidity Security Audit skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add mariano-aguero/solidity-security-audit-skill --skill solidity-security-audit. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Solidity Security Audit popular?

It lives in mariano-aguero/solidity-security-audit-skill, which has 6 GitHub stars and 2 forks.

Related skills

16 Eyes

kigiela/16-eyes

Security audits with four subcommands — `/16-eyes init` (configure: detect quality gates, exclude patterns, output location, and design the repo's tailored investigation lenses — auto-runs non-interactively if skipped), `/16-eyes audit` (run every persisted lens across the WHOLE repo, verify every finding skeptically, adversarially re-check high-impact ones, produce a classified safe/risky report), `/16-eyes audit-diff` (the identical engine, scoped to a diff/PR instead of the whole repo — for reviewing a change before merge), `/16-eyes fix` (apply the findings — safe ones directly, risky ones

SecurityIn 1 list

Security Review

Dilaz/security-review-skill

Use when performing security audits, vulnerability assessments, penetration testing, or when asked to find security issues. Use when encountering code that handles user input, executes commands, reads files, or makes network requests.

Security

Skill Evaluator

huajielong/skill-evaluator

Evaluate any skill before installing. Run security gate, score trigger precision, execution quality, and cost efficiency. Get a yes/no recommendation. Use when users find a new skill and ask "这个技能值不值得装？" v3.1: 脚本计数精度+信息密度阈值+脚本完整性检查

Security

Oma Lwm2m Expert

svdwalt007/Best-LwM2M-Agentic-Skills

OMA LwM2M expert: specs v1.0–v1.2.2 plus v2.0 roadmap, object/resource data model, transports, security, ecosystem. Trigger on: LwM2M, Lightweight M2M, OMA SpecWorks, OMNA registry, OMA-TS-LightweightM2M, CoAP (RFC 7252/7641/7959/8323), DTLS, DTLS CID (RFC 9146), DTLS 1.3, RRC (RFC 9853), OSCORE (RFC 8613), PSK, RPK, X.509, EST, SNI, NoSec, TLV, SenML JSON/CBOR, LwM2M CBOR, bootstrap, Bootstrap-Pack, registration, endpoint name, Profile ID, Queue Mode, bindings (UDP/TCP/SMS/Non-IP/LoRaWAN/MQTT/HTTP/ WebSockets), Read/Write/Execute/Discover, composite operations, Send, observe/notify, notificat

Security

Ia Security Skill

antoniocostalopes/ia-security-skill

Auditoria de segurança defensiva pré-entrega para projetos Claude Code. Cobre web, mobile (MASVS), cloud/IaC, web3 e ML/AI em 18 linguagens e 34 frameworks. Devolve relatório Markdown com score 0-100, mapa de postura (seguro/menos seguro/inseguro por área), attack chains e achados detalhados; opcionalmente aplica as correções no código com confirmação por achado. Ativa quando o developer pede para auditar, fazer security review, verificar vulnerabilidades, corrigir/blindar código antes do deploy.

Security

Spinal Pro

Zeeh-Lin/spinal-pro

End-to-end SpinalHDL skill for generating, reviewing, explaining, and validating RTL (Scala HDL). Covers DSL semantics (`:=`, `<>`, `Reg`, `Stream`, `Flow`, `Bundle`, `Vec`, `ClockDomain`, `StateMachine`, `Mem`, `BusSlaveFactory`), pipeline and plugin composition (`spinal.lib.misc.pipeline`, `spinal.lib.misc.plugin`), simulation with `SimConfig`/`doSim`, and architecture patterns drawn from official SpinalHDL docs and VexRiscv. Load for SpinalHDL DSL questions, module implementation, interface design, SoC integration, bug hunting, error-message decoding, and simulation or build validation.

Security

Browse the most popular Claude skills, all security skills, or write your own with the skills generator.