schwepps avatar

Solidity Auditor

A professional smart contract auditor that runs comprehensive security reviews based on the OWASP Smart Contract Top 10 (2025) and real-world exploit patterns. It handles everything from full audits to targeted reviews for gas optimization, storage patterns, or DeFi protocol analysis. The skill adapts to your Solidity version, checking for SafeMath in pre-0.8.0 contracts or scrutinizing unchecked blocks in newer versions. It prioritizes critical vulnerabilities like access control flaws (responsible for $953M in losses) and reentrancy before moving to optimization suggestions. Each finding includes severity rating, exact location, exploitation scenario, and actionable code fixes. Use this when you need a structured security review before deployment or want to understand specific vulnerabilities in existing contracts.

skills.sh installs
193
GitHub stars
17
last updated
Aug 21, 2026

Install

$ npx -y skills add schwepps/skills --skill solidity-auditor --agent claude-code

Installs into .claude/skills of the current project.

Files

Solidity Smart Contract Auditor

A professional-grade smart contract audit skill covering security vulnerabilities, gas optimization, storage patterns, and code architecture. Adapted to Solidity version specifics.

Audit Types

Determine the audit type based on user request:

User RequestAudit TypePrimary Reference
"Full audit", "comprehensive review"Full AuditAll references
"Security audit", "vulnerability scan"Security Focusedreferences/security-checklist.md
"Gas optimization", "reduce gas costs"Gas Optimizationreferences/gas-optimization.md
"Storage optimization", "storage patterns"Storage Optimizationreferences/storage-optimization.md
"Code review", "architecture review"Architecture Reviewreferences/architecture-review.md
"DeFi audit", "protocol review"DeFi ProtocolSecurity + Architecture references

Core Audit Workflow

Phase 1: Preparation

Sponsors

Details

Repository
github.com/schwepps/skills
Categories
Security, Code Review & Quality, Release Management, Finance & Trading, Web3 & Blockchain
First seen
Jun 3, 2026

More from schwepps/skills

All 3

Recommended

More Security
1yonatangross avatarmcp-patternsyonatangross/orchestkitMCP server building, advanced patterns, and security hardening. Use when building MCP servers, implementing tool handlers, choosing a transport, adding OAuth au190skills.sh installs
2itsmostafa avatarcognitoitsmostafa/aws-agent-skillsAWS Cognito user authentication and authorization service. Use when setting up user pools, configuring identity pools, implementing OAuth flows, managing user a188skills.sh installs
3prompt-security avatarclawsec-nanoclawprompt-security/clawsecUse when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot188skills.sh installs
4personamanagmentlayer avataraudit-expertpersonamanagmentlayer/pclExpert-level security auditing, compliance, code review, and vulnerability assessment186skills.sh installs
5davepoon avatarauth-patternsdavepoon/buildwithclaudeThis skill should be used when the user asks about "authentication in Next.js", "NextAuth", "Auth.js", "middleware auth", "protected routes", "session managemen182skills.sh installs
6charleswiltgen avataraxiom-file-protection-refcharleswiltgen/axiomUse when asking about 'FileProtectionType', 'file encryption iOS', 'NSFileProtection', 'data protection', 'secure file storage', 'encrypt files at rest', 'compl177skills.sh installs