Is this skill useful for non-token projects?

Absolutely. While it includes ERC checks, the workflow covers general logic, access control, and mathematical safety applicable to any Solidity project.

What standards does this security guide follow?

It follows the official 5-step secure development workflow developed by Trail of Bits, a leader in blockchain security.

Can it detect vulnerabilities in proxy and upgradeable contracts?

Yes, it specifically includes steps for slither-check-upgradeability to identify 17 common risks associated with proxy patterns.

Does this skill require external tools to be installed?

Yes, for full functionality it utilizes Slither, and suggests tools like Echidna and Manticore for property-based fuzzing and formal verification.

Secure Smart Contract Workflow

Name: Secure Smart Contract Workflow
Author: fjor1025

byfjor1025

0•

Security & Testing

Guides developers through the Trail of Bits 5-step secure development workflow to audit and harden smart contracts.

This skill automates a rigorous security review process for Ethereum and Solidity projects based on the industry-standard Trail of Bits methodology. It integrates deep static analysis via Slither, validates critical features like upgradeability and ERC conformance, and generates visual security diagrams to reveal hidden architectural risks. Beyond automation, it helps developers document security invariants for fuzzing with Echidna and provides targeted checklists for manual review areas such as front-running and DeFi-specific vulnerabilities, making it an essential tool for preparing code for professional audits.

Key Features

01Validation of upgradeability risks and ERC standard conformance

02Automated Slither static analysis with over 70 vulnerability detectors

03Structured manual review guide for privacy, front-running, and DeFi risks

04Assistance in documenting security properties for Echidna and Manticore

050 GitHub stars

06Generation of visual inheritance, function summary, and authorization diagrams

Use Cases

01Conducting a comprehensive security audit before deploying to mainnet

02Establishing a continuous security check-in process for every Git commit

03Setting up property-based testing and formal verification for complex protocols

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework secure-workflow-guide

For use in Claude.ai and ChatGPT

Download Skill