Solidity Security Audit Assistant
Audit Solidity contracts for vulnerabilities, gas issues, and best practice violations
What You Can Do
You can conduct comprehensive security audits of Solidity smart contracts by providing your contract code and receiving structured analysis across multiple vulnerability categories. Claude identifies reentrancy risks, integer overflow/underflow issues, access control flaws, state management problems, gas inefficiencies, and best practice violations—catching subtle issues that automated analyzers miss. You'll receive detailed audit reports with severity ratings, specific remediation code, and business impact assessments to guide your fixes before mainnet deployment.
Features
identifies checks-effects-interactions violations and guard patterns
detects unchecked arithmetic and suggests SafeMath patterns
examines permission checks, modifier usage, and authorization flows
analyzes storage layout, initialization, and state consistency issues
finds inefficient patterns and suggests optimization techniques
flags deviations from Solidity standards and security guidelines
rates findings as critical, high, medium, or low with business impact
provides patched code snippets for each identified issue
Example Output
Audit Report: TokenSwap.sol
CRITICAL: Reentrancy vulnerability in withdraw() function
- Issue: External call to user address precedes balance update
- Impact: Attacker can drain contract via fallback function loop
- Fix: Move
balances[msg.sender] = 0beforemsg.sender.call{value: amount}()
HIGH: Integer overflow in mint() function
- Issue:
totalSupply += amountlacks bounds checking - Impact: Attacker can mint unlimited tokens if supply approaches uint256 max
- Fix: Add
require(totalSupply + amount > totalSupply)or use SafeMath
MEDIUM: Missing event emission in transfer()
- Issue: No event logged for token movements
- Impact: Off-chain indexing and monitoring fail
- Fix: Add
emit Transfer(from, to, amount)after balance updates
What's Included
- SKILL.md instruction file with systematic audit methodology and vulnerability taxonomy:
- Solidity Vulnerability Checklist: comprehensive reference for 25+ common attack patterns
- Audit Report Template: standardized format with severity levels and remediation sections
- Code Review Prompts: copy-paste templates for analyzing specific contract functions
- Security Patterns Reference: examples of correct vs. vulnerable code implementations
Who It's For
- Smart contract developers preparing for mainnet deployment
- Protocol engineers conducting internal security reviews before upgrades
- Technical leads auditing third-party contract integrations
- Blockchain security engineers establishing baseline reports before external audits
- DeFi developers reviewing code for inherited or forked protocols
Best For
- Pre-deployment security analysis of new smart contracts
- Internal code reviews for protocol upgrades and feature changes
- Baseline audit generation before engaging professional auditors
- Learning security patterns by analyzing vulnerabilities in existing code
- Risk assessment of contract forks and inherited codebases
You might also like
You conduct comprehensive security audits of DeFi protocols by systematically identifying smart contract vulnerabilities, economic attack vectors, flash loan exploitation paths, MEV manipulation risks, oracle dependency failures, and governance exploits. This structured analysis helps you remediate critical flaws before mainnet launch, protecting user funds and protocol viability from costly post-deployment hacks and regulatory exposure.
by autoclaw-cc
You can conduct comprehensive security audits of DeFi protocols by analyzing smart contract code for technical vulnerabilities (reentrancy, integer overflow, authorization flaws), simulating economic attacks (flash loan exploits, sandwich attacks, liquidation cascades), and identifying second-order composability risks that could lead to protocol failure. Claude acts as your interactive analysis partner, pattern-matching known vulnerabilities and helping you model attack scenarios before external audits or mainnet deployment.
by autoclaw-cc
This skill runs rigorous financial analysis on your specific situation, calculating break-even points, NPV, IRR, and long-term wealth impact while factoring in behavioral and lifestyle considerations that pure math misses. You get a clear recommendation backed by numbers, scenario comparisons showing what happens if markets shift, and a detailed breakdown of when buying becomes better than renting.
by autoclaw-cc
This skill audits support interactions using customer support-specific evaluation frameworks that assess tone, empathy, technical accuracy, resolution quality, and compliance adherence. You receive detailed scoring against rubrics, identification of coaching opportunities with actionable feedback, compliance verification against regulatory requirements, and quality trend analysis to improve overall team performance.
by autoclaw-cc
You can comprehensively analyze bridge architectures across multiple dimensions—from transfer models and custody mechanisms to validator infrastructure and liquidity strategies. This skill guides you through systematic security evaluation, protocol comparison, and vulnerability identification to design resilient cross-chain solutions aligned with your risk tolerance and technical constraints.
by autoclaw-cc
You can design novel consensus mechanisms or modify existing protocols (PoW variants, PoS schemes, hybrid models) while systematically evaluating their security, economic incentives, and attack resistance. The framework guides you through specification, formal verification, threat modeling, economic security simulation, and production-readiness assessment—identifying vulnerabilities in consensus logic, incentive structures, and Byzantine fault tolerance guarantees before mainnet launch.
by autoclaw-cc
You can conduct rigorous Layer 1 and Layer 2 architecture analysis by inputting your technical constraints, use-case requirements, and performance targets. Claude generates quantified trade-off matrices comparing consensus mechanisms, throughput vs. finality trade-offs, security implications, and implementation roadmaps—helping you validate design assumptions and identify architectural bottlenecks before deployment.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by submitting code for systematic analysis across vulnerability categories, gas optimization, and best practice compliance. Claude identifies critical issues like reentrancy attacks, integer overflow/underflow, improper access controls, and unoptimized patterns—providing actionable findings with severity levels and remediation guidance. This skill works best as a pre-audit screening tool to catch issues before engaging professional auditors.
by autoclaw-cc