Skip to content
Get packs

Ethereum Smart Contract Vulnerability Analysis

Runs Slither and Mythril on Solidity contracts to flag security flaws before deployment

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
3 files

What it does

This skill teaches an AI agent to audit Solidity smart contracts (the programs that run on the Ethereum blockchain) before they are deployed. Once installed, the agent can run two established analysis tools: Slither, which quickly scans code for known vulnerability patterns, and Mythril, which explores possible execution paths to find issues such as reentrancy and integer overflow. It then helps triage the findings by severity and produces a structured report that maps issues to SWC identifiers and suggests fixes.

Great for

  • Smart contract developers checking code before a mainnet release
  • Security reviewers doing a first-pass audit of a DeFi project
  • Teams who want a repeatable checklist of Slither and Mythril steps with a written report

Skip it if

  • Replacing a professional third-party audit: static and symbolic tools miss logic flaws and business-logic bugs, so false negatives are likely
  • Analysing contracts you do not own or have permission to test, since the skill is a general analysis workflow and gives no authorisation checks
  • Non-Solidity chains or languages, which the Slither and Mythril steps do not cover

Try asking

  • “Analyze my Solidity contracts in ./contracts with Slither and Mythril and list reentrancy or overflow risks”
  • “Triage these Slither findings by severity and remove likely false positives”
  • “Write an audit report in JSON with SWC IDs and suggested fixes for my token contract”
  • “Explain what SWC-107 reentrancy means for my vault contract and how to fix it”
Step-by-step guide: how to use Ethereum Smart Contract Vulnerability AnalysisInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    analyzing-ethereum-smart-contract-vulnerabilities.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip analyzing-ethereum-smart-contract-vulnerabilities.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip analyzing-ethereum-smart-contract-vulnerabilities.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the analysis on a local copy of the contract and keep your own source out of shared or public tools
  • Treat every finding as a lead to verify manually, not as a confirmed vulnerability
  • Pin the solc version to match your contract's pragma so results are accurate

What's inside

  • references/api-reference.md
  • scripts/agent.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.