Skip to content
Get packs

Solidity Security

Review and write Solidity smart contracts with common vulnerability checks and secure patterns

Source Download skill
Repository
wshobson/agents
Stars
42,095
Licence
MIT
Files
2 files

What it does

When installed, the agent gets guidance on writing and auditing Solidity smart contracts (code that runs on Ethereum-style blockchains). It focuses on preventing well-known bugs such as reentrancy, integer overflow, and missing access control, and on preparing code for professional audits. It can also write example Hardhat tests and documentation-style code comments that demonstrate these checks.

Great for

  • Developers writing Solidity contracts who want a security checklist applied during coding
  • Teams preparing a contract for a professional security audit
  • Developers learning common smart contract attack patterns such as reentrancy

Skip it if

  • Replacing a professional security audit: the skill is guidance, not a verified analysis tool, and missed bugs can cost real funds
  • Non-developers deploying contracts with real money, since misconfigured contracts can be drained irreversibly
  • Non-Solidity blockchains or languages (for example Rust-based Solana programs), which this skill does not cover

Try asking

  • “Review this Solidity contract for reentrancy and access control issues”
  • “Write Hardhat tests that check my withdraw function is protected against reentrancy”
  • “Prepare my token contract for a professional audit by adding documentation and checking common vulnerabilities”
  • “Explain the checks-effects-interactions pattern and show me how to apply it to my bank contract”
Step-by-step guide: how to use Solidity SecurityInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    solidity-security.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip solidity-security.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip solidity-security.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent the full contract source and state which version of Solidity you use, since the advice depends on language version and libraries
  • Treat the agent's findings as a starting checklist and still run static analysis tools and a professional audit before mainnet deployment
  • Ask the agent to write tests for each vulnerability class it reports so the fixes are verified

What's inside

  • references/details.md
  • SKILL.md

Redistributed unmodified from wshobson/agents under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.