How does it prevent reentrancy?

It guides developers in implementing the Checks-Effects-Interactions (CEI) pattern and utilizing OpenZeppelin's ReentrancyGuard to stop malicious external calls.

What is the Solidity Security skill?

It is a specialized extension for Claude Code that provides expert guidance on writing, auditing, and optimizing secure smart contracts on Ethereum and other EVM-compatible blockchains.

Does it support the latest Solidity versions?

Absolutely, it covers patterns for Solidity 0.8+ (including built-in overflow checks) as well as legacy support using SafeMath for older versions.

Can this skill help with gas optimization?

Yes, it includes specific patterns for packing storage variables and using calldata to minimize transaction costs while maintaining high security standards.

Is this a replacement for a professional audit?

While it provides comprehensive security checks and follows industry best practices, it is intended to assist developers and prepare code for a final professional audit, not replace it.

Solidity Security & Best Practices

Name: Solidity Security & Best Practices
Author: HermeticOrmus

byHermeticOrmus

セキュリティとテスト

Master smart contract security to prevent vulnerabilities and implement industry-standard Solidity development patterns.

概要

This skill equips Claude with specialized knowledge in Ethereum smart contract security, focusing on the prevention of critical vulnerabilities like reentrancy attacks, integer overflows, and unauthorized access. It provides real-time guidance on implementing the Checks-Effects-Interactions pattern, optimizing gas efficiency without compromising safety, and preparing codebases for professional audits. Whether you are building complex DeFi protocols or simple token contracts, this skill ensures your blockchain applications are resilient, efficient, and follow the latest secure development philosophies.

主な機能

Built-in security checklists for smart contract audit preparation
Implementation of secure access control and role-based permissions
0 GitHub stars
Automated patterns for pull-over-push payment systems
Detection and mitigation of reentrancy and front-running vulnerabilities
Gas optimization patterns for storage packing and calldata usage

ユースケース

Writing gas-efficient Solidity code for Ethereum and EVM-compatible chains
Auditing existing smart contracts for common attack vectors
Developing secure DeFi protocols with robust state management

概要

主な機能

Built-in security checklists for smart contract audit preparation
Implementation of secure access control and role-based permissions
0 GitHub stars
Automated patterns for pull-over-push payment systems
Detection and mitigation of reentrancy and front-running vulnerabilities
Gas optimization patterns for storage packing and calldata usage

ユースケース

Writing gas-efficient Solidity code for Ethereum and EVM-compatible chains
Auditing existing smart contracts for common attack vectors
Developing secure DeFi protocols with robust state management