Solidity Security Audit Assistant
Audit Solidity contracts for vulnerabilities, gas inefficiencies & best practices
What You Can Do
You can conduct comprehensive security audits of Solidity smart contracts by submitting code for systematic analysis across vulnerability categories, gas optimization, and best practice compliance. Claude identifies critical issues like reentrancy attacks, integer overflow/underflow, improper access controls, and unoptimized patterns—providing actionable findings with severity levels and remediation guidance. This skill works best as a pre-audit screening tool to catch issues before engaging professional auditors.
Features
identifies reentrancy, integer overflow/underflow, access control flaws, delegatecall risks, and other OWASP top vulnerabilities
flags inefficient storage patterns, unnecessary computations, and opportunities to reduce transaction costs
validates compliance with Solidity conventions, OpenZeppelin standards, and architectural patterns
categorizes findings as critical, high, medium, or low with clear impact explanations
evaluates contract design patterns, separation of concerns, and principle of least privilege implementation
supports iterative refinement by analyzing contract modifications and explanations of fix attempts
produces audit findings summaries suitable for internal records or compliance documentation
detects common vulnerability classes like improper initialization, unchecked external calls, and state management issues
Example Output
Contract Analysis Request:
function withdraw(uint amount) public {
require(balances[msg.sender] >= amount);
(bool success, ) = msg.sender.call{value: amount}("");
require(success);
balances[msg.sender] -= amount;
}
Audit Output:
- CRITICAL: Reentrancy Vulnerability — Balance is decremented after external call. Attacker can recursively call
withdraw()to drain contract. Fix: Use CEI pattern (Checks-Effects-Interactions) or ReentrancyGuard. - HIGH: Unchecked Return Value — External call success checked but no fallback mechanism. Add try-catch or explicit revert with reason.
- MEDIUM: Gas Inefficiency — Use
transfer()ortransferFrom()instead of low-levelcall{}for standard ERC20 transfers.
Recommended Remediations:
- Move balance update before external call
- Implement OpenZeppelin ReentrancyGuard
- Add detailed revert reasons for failed withdrawals
What's Included
- SKILL.md: Core instruction file with audit framework and vulnerability taxonomy
- Vulnerability Checklist: Structured list of 40+ vulnerability patterns organized by category (access control, state management, external interactions)
- Audit Report Template: Markdown template for documenting findings with severity levels, code snippets, and remediation steps
- Gas Optimization Guide: Reference list of common gas inefficiencies with before/after code examples
- Best Practices Framework: Solidity conventions checklist covering naming, documentation, error handling, and design patterns
Who It's For
- Smart Contract Developers — conducting internal security reviews before mainnet deployment
- Blockchain Security Engineers — analyzing contract code for vulnerability patterns and compliance
- Code Reviewers — evaluating pull requests containing Solidity modifications
- Junior Developers — learning vulnerability patterns and security-first coding practices
- DeFi Protocol Teams — assessing third-party contract integrations and inherited codebases
Best For
- Pre-audit screening of smart contracts before engaging professional auditors
- Pull request security reviews for ongoing contract development
- Gas optimization analysis for production contract cost reduction
- Training and knowledge transfer on Solidity vulnerability patterns
- Risk assessment of contract integrations and external dependencies
You might also like
You conduct comprehensive security audits of DeFi protocols by systematically identifying smart contract vulnerabilities, economic attack vectors, flash loan exploitation paths, MEV manipulation risks, oracle dependency failures, and governance exploits. This structured analysis helps you remediate critical flaws before mainnet launch, protecting user funds and protocol viability from costly post-deployment hacks and regulatory exposure.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by providing your contract code and receiving structured analysis across multiple vulnerability categories. Claude identifies reentrancy risks, integer overflow/underflow issues, access control flaws, state management problems, gas inefficiencies, and best practice violations—catching subtle issues that automated analyzers miss. You'll receive detailed audit reports with severity ratings, specific remediation code, and business impact assessments to guide your fixes before mainnet deployment.
by autoclaw-cc
You can conduct comprehensive security audits of DeFi protocols by analyzing smart contract code for technical vulnerabilities (reentrancy, integer overflow, authorization flaws), simulating economic attacks (flash loan exploits, sandwich attacks, liquidation cascades), and identifying second-order composability risks that could lead to protocol failure. Claude acts as your interactive analysis partner, pattern-matching known vulnerabilities and helping you model attack scenarios before external audits or mainnet deployment.
by autoclaw-cc
This skill runs rigorous financial analysis on your specific situation, calculating break-even points, NPV, IRR, and long-term wealth impact while factoring in behavioral and lifestyle considerations that pure math misses. You get a clear recommendation backed by numbers, scenario comparisons showing what happens if markets shift, and a detailed breakdown of when buying becomes better than renting.
by autoclaw-cc
This skill audits support interactions using customer support-specific evaluation frameworks that assess tone, empathy, technical accuracy, resolution quality, and compliance adherence. You receive detailed scoring against rubrics, identification of coaching opportunities with actionable feedback, compliance verification against regulatory requirements, and quality trend analysis to improve overall team performance.
by autoclaw-cc
You can comprehensively analyze bridge architectures across multiple dimensions—from transfer models and custody mechanisms to validator infrastructure and liquidity strategies. This skill guides you through systematic security evaluation, protocol comparison, and vulnerability identification to design resilient cross-chain solutions aligned with your risk tolerance and technical constraints.
by autoclaw-cc
You can design novel consensus mechanisms or modify existing protocols (PoW variants, PoS schemes, hybrid models) while systematically evaluating their security, economic incentives, and attack resistance. The framework guides you through specification, formal verification, threat modeling, economic security simulation, and production-readiness assessment—identifying vulnerabilities in consensus logic, incentive structures, and Byzantine fault tolerance guarantees before mainnet launch.
by autoclaw-cc
You can conduct rigorous Layer 1 and Layer 2 architecture analysis by inputting your technical constraints, use-case requirements, and performance targets. Claude generates quantified trade-off matrices comparing consensus mechanisms, throughput vs. finality trade-offs, security implications, and implementation roadmaps—helping you validate design assumptions and identify architectural bottlenecks before deployment.
by autoclaw-cc