Solidity Security Audit Assistant
Identify vulnerabilities, gas inefficiencies, and design flaws in Solidity smart contracts
What You Can Do
You can conduct comprehensive security audits of Solidity smart contracts by identifying common vulnerabilities like reentrancy bugs, overflow/underflow issues, and access control gaps. The skill applies OWASP Smart Contract Top 10 patterns and ERC token standards compliance checks to catch critical flaws before deployment, helping you optimize gas usage and strengthen contract architecture.
Features
identifies unsafe call patterns and state management issues that enable reentrancy exploits
catches overflow/underflow bugs and unsafe math operations across contract logic
reviews permission models, function visibility, and role-based restrictions for gaps
pinpoints inefficient loops, redundant storage access, and unnecessary computations
validates token contract implementations against ERC-20, ERC-721, and other standards
evaluates inherited contracts and external libraries for known vulnerability patterns
identifies design flaws in state management, upgrade mechanisms, and contract interactions
Example Output
Vulnerability Report: TokenVault.sol
Critical Issues Found: 2
- Reentrancy in withdraw() (Line 45): External call to
msg.senderbefore updating balance allows recursive withdrawals- Fix: Implement checks-effects-interactions pattern; update balance before transfer
High Priority: 1
- Missing access control on mint() (Line 28): Any address can call minting function
- Fix: Add
onlyOwnermodifier or role-based access control
- Fix: Add
Gas Optimization Opportunities: 3
- Store
balances[msg.sender]in memory before loop (Line 12) to save 3 SLOAD operations (~300 gas) - Replace
forloop with batch processing for mass transfers - Use immutable for token name and symbol declarations
Compliance Status: ERC-20 interface incomplete — missing approve() event emission
What's Included
- SKILL.md: Complete audit methodology and vulnerability classification framework
- Vulnerability Checklist: Structured list of 50+ common Solidity vulnerability patterns
- Code Review Template: Section-by-section contract analysis framework
- Gas Optimization Reference: Documented gas costs for common operations and improvement strategies
- ERC Compliance Validator: Interface requirements for ERC-20, ERC-721, and ERC-1155 standards
Who It's For
- Solidity smart contract developers conducting pre-deployment security reviews
- Blockchain development teams performing peer code review before mainnet launch
- Web3 engineers assessing third-party contracts for integration risks
- Security-focused developers learning secure Solidity patterns and best practices
- Contract auditors preparing code for professional third-party security assessments
Best For
- Pre-deployment security audits of new smart contracts
- Gas optimization analysis before mainnet launch
- Identifying reentrancy vulnerabilities and access control gaps
- Validating ERC token standard compliance
- Reviewing inherited contracts and external dependencies for vulnerabilities
You might also like
You conduct comprehensive security audits of DeFi protocols by systematically identifying smart contract vulnerabilities, economic attack vectors, flash loan exploitation paths, MEV manipulation risks, oracle dependency failures, and governance exploits. This structured analysis helps you remediate critical flaws before mainnet launch, protecting user funds and protocol viability from costly post-deployment hacks and regulatory exposure.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by providing your contract code and receiving structured analysis across multiple vulnerability categories. Claude identifies reentrancy risks, integer overflow/underflow issues, access control flaws, state management problems, gas inefficiencies, and best practice violations—catching subtle issues that automated analyzers miss. You'll receive detailed audit reports with severity ratings, specific remediation code, and business impact assessments to guide your fixes before mainnet deployment.
by autoclaw-cc
You can conduct comprehensive security audits of DeFi protocols by analyzing smart contract code for technical vulnerabilities (reentrancy, integer overflow, authorization flaws), simulating economic attacks (flash loan exploits, sandwich attacks, liquidation cascades), and identifying second-order composability risks that could lead to protocol failure. Claude acts as your interactive analysis partner, pattern-matching known vulnerabilities and helping you model attack scenarios before external audits or mainnet deployment.
by autoclaw-cc
This skill runs rigorous financial analysis on your specific situation, calculating break-even points, NPV, IRR, and long-term wealth impact while factoring in behavioral and lifestyle considerations that pure math misses. You get a clear recommendation backed by numbers, scenario comparisons showing what happens if markets shift, and a detailed breakdown of when buying becomes better than renting.
by autoclaw-cc
This skill audits support interactions using customer support-specific evaluation frameworks that assess tone, empathy, technical accuracy, resolution quality, and compliance adherence. You receive detailed scoring against rubrics, identification of coaching opportunities with actionable feedback, compliance verification against regulatory requirements, and quality trend analysis to improve overall team performance.
by autoclaw-cc
You can comprehensively analyze bridge architectures across multiple dimensions—from transfer models and custody mechanisms to validator infrastructure and liquidity strategies. This skill guides you through systematic security evaluation, protocol comparison, and vulnerability identification to design resilient cross-chain solutions aligned with your risk tolerance and technical constraints.
by autoclaw-cc
You can design novel consensus mechanisms or modify existing protocols (PoW variants, PoS schemes, hybrid models) while systematically evaluating their security, economic incentives, and attack resistance. The framework guides you through specification, formal verification, threat modeling, economic security simulation, and production-readiness assessment—identifying vulnerabilities in consensus logic, incentive structures, and Byzantine fault tolerance guarantees before mainnet launch.
by autoclaw-cc
You can conduct rigorous Layer 1 and Layer 2 architecture analysis by inputting your technical constraints, use-case requirements, and performance targets. Claude generates quantified trade-off matrices comparing consensus mechanisms, throughput vs. finality trade-offs, security implications, and implementation roadmaps—helping you validate design assumptions and identify architectural bottlenecks before deployment.
by autoclaw-cc