solidity-security

Name: solidity-security - Agent Skill
Rating: 5.0 (26449 reviews)
Author: wshobson

26,449

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

Download Folder View on GitHub

CLI Install

Recommended

Use the skills CLI to install this skill with one command. Auto-detects all installed AI assistants.

Method 1 - skills CLI

npx skills i wshobson/agents/plugins/blockchain-web3/skills/solidity-security

Method 2 - openskills (supports sync & update)

npx openskills install wshobson/agents

Auto-detects Claude Code, Cursor, Codex CLI, Gemini CLI, and more. One install, works everywhere.

Installation Path

Download and extract to one of the following locations:

~/.claude/skills/solidity-security/

SKILL.md

references

Skill Instructions

Back

Run with Cloud Agent

No setup needed. Let our cloud agents run this skill for you.

Select Provider

Select Model

Claude Sonnet 4.5

$0.20/task

Best for coding tasks

Environment setup included

Solidity Security

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

When to Use This Skill

Writing secure smart contracts
Auditing existing contracts for vulnerabilities
Implementing secure DeFi protocols
Preventing reentrancy, overflow, and access control issues
Optimizing gas usage while maintaining security
Preparing contracts for professional audits
Understanding common attack vectors

Detailed patterns and worked examples

Detailed pattern documentation lives in references/details.md. Read that file when the navigation tier above is insufficient.

Testing for Security

// Hardhat test example
const { expect } = require("chai");
const { ethers } = require("hardhat");
 
describe("Security Tests", function () {
  it("Should prevent reentrancy attack", async function () {
    const [attacker] = await ethers.getSigners();

Audit Preparation

contract WellDocumentedContract {
    /**
     * @title Well Documented Contract
     * @dev Example of proper documentation for audits
     * @notice This contract handles user deposits and withdrawals
     */
 
    /// @notice Mapping of user balances
    mapping(address

const bank = await VictimBank.deploy();

const Attacker = await ethers.getContractFactory("ReentrancyAttacker");

const attackerContract = await Attacker.deploy(bank.address);

await bank.deposit({ value: ethers.utils.parseEther("10") });

// Attempt reentrancy attack

attackerContract.attack({ value: ethers.utils.parseEther("1") }),

).to.be.revertedWith("ReentrancyGuard: reentrant call");

it("Should prevent integer overflow", async function () {

const Token = await ethers.getContractFactory("SecureToken");

const token = await Token.deploy();

await expect(token.transfer(attacker.address, ethers.constants.MaxUint256))

it("Should enforce access control", async function () {

const [owner, attacker] = await ethers.getSigners();

const Contract = await ethers.getContractFactory("SecureContract");

const contract = await Contract.deploy();

// Attempt unauthorized withdrawal

await expect(contract.connect(attacker).withdraw(100)).to.be.revertedWith(

"Ownable: caller is not the owner",

* @dev Deposits ETH into the contract

* @notice Anyone can deposit funds

function deposit() public payable {

require(msg.value > 0, "Must send ETH");

balances[msg.sender] += msg.value;

* @dev Withdraws user's balance

* @notice Follows CEI pattern to prevent reentrancy

* @param amount Amount to withdraw in wei

function withdraw(uint256 amount) public {

require(amount <= balances[msg.sender], "Insufficient balance");

balances[msg.sender] -= amount;

(bool success, ) = msg.sender.call{value: amount}("");

require(success, "Transfer failed");