Solidity Security

This handles the security fundamentals that trip up most Solidity developers, from reentrancy guards to proper access control patterns. It covers the critical vulnerability classes you'll encounter in audits: overflow protection, front-running mitigation, and gas optimization techniques that don't compromise security. The code examples follow the checks-effects-interactions pattern and show both vulnerable and secure implementations side by side. Use this when you're writing contracts that handle real value or preparing for a professional audit. It's particularly solid on the practical stuff like emergency stops and pull-over-push patterns that separate production-ready contracts from toy examples.

skills.sh installs: 15.8K
GitHub stars: 42.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add wshobson/agents --skill solidity-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Solidity Security

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

When to Use This Skill

Writing secure smart contracts
Auditing existing contracts for vulnerabilities
Implementing secure DeFi protocols
Preventing reentrancy, overflow, and access control issues
Optimizing gas usage while maintaining security
Preparing contracts for professional audits
Understanding common attack vectors

Detailed patterns and worked examples

Detailed pattern documentation lives in references/details.md. Read that file when the navigation tier above is insufficient.

Testing for Security

// Hardhat test example
const { expect } = require("chai");
const { ethers } = require("hardhat");

describe("Security Tests", function () {
  it("Should prevent reentrancy attack", async function () {
    const [attacker] = await ethers.getSigners();

    const VictimBank = await ethers.getContractFactory("SecureBank");
    const bank = await VictimBank.deploy();

SKILL.md on GitHub