Does it provide automated fixes for vulnerabilities?

Yes, the skill includes a dedicated patching mode that generates unified diffs and validates the fixes against existing tests to ensure security without breaking functionality.

How does it validate that a vulnerability is real?

It uses a script-backed exploit phase that sets up a local Anvil chain, generates exploit scaffolds, and runs transaction scripts to provide concrete evidence of the bug's impact.

Can I use this for local repositories?

Absolutely. The skill can be used to audit both remote GitHub URLs and local paths on your machine, automatically preparing the environment in either case.

What frameworks does this skill support?

The skill supports the most common EVM development frameworks, including Foundry, Hardhat, and Truffle, and can even attempt to handle unknown configurations.

What is the primary focus of the audit report?

The report prioritizes high-severity vulnerabilities that could result in loss of funds or protocol takeover, providing exact file and line references for every finding.

Smart Contract Security Auditor

Name: Smart Contract Security Auditor
Author: greatpie

bygreatpie

•

보안 및 테스팅

Audits Solidity and EVM-based smart contract repositories to detect vulnerabilities, validate exploits, and generate detailed security reports.

This skill provides a comprehensive, script-driven workflow for security professionals and developers to audit Ethereum Virtual Machine (EVM) repositories using the EVMbench methodology. It automates the entire security lifecycle—from environment bootstrapping and vulnerability detection (focused on high-severity loss-of-funds issues) to exploit validation and patch generation. By integrating with popular frameworks like Foundry and Hardhat, it delivers structured reports with exact code references, helping teams secure their protocols before deployment.

주요 기능

01Deterministic vulnerability detection focused on high-impact loss-of-funds risks

02Automated environment bootstrapping for Foundry, Hardhat, and Truffle projects

032 GitHub stars

04Automated patch generation with unified diffs for secure remediation

05Standardized report generation including risk hotspot maps and root cause analysis

06Local exploit validation and scaffolding using Anvil for proof-of-concept evidence

사용 사례

01Conducting pre-deployment security audits for DeFi protocols and token contracts

02Generating production-ready patches and security documentation for smart contract bug fixes

03Validating the exploitability of suspected vulnerabilities in a sandboxed local environment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add greatpie/smart-contract-audit-skill smart-contract-audit

For use in Claude.ai and ChatGPT

Download Skill