When is the best time to run this security guide?

It is recommended to run the workflow on every significant check-in, before any major deployment, or when performing a peer review of a new smart contract feature.

What is the 5-step workflow implemented by this skill?

It follows the Trail of Bits methodology: 1. Check for known issues (Slither), 2. Check special features (Upgrades/ERC), 3. Visual inspection (Diagrams), 4. Document properties (Fuzzing/Invariants), and 5. Manual review (DeFi/Logic).

Can this skill help with formal verification?

Yes, Step 4 of the workflow focuses on documenting security properties and state machine invariants, which are essential prerequisites for formal verification using tools like Manticore.

Do I need to have Slither installed to use this skill?

Yes, this skill acts as an intelligent orchestrator for Slither. For the automated scanning and diagram generation steps to function, Slither must be installed in your development environment.

Is this skill limited to ERC20 tokens?

No, while it includes specific checks for common ERC standards, the workflow is designed to audit any Solidity-based smart contract, including complex DeFi protocols and NFT systems.

Secure Workflow Guide

Name: Secure Workflow Guide
Author: monmacllcapp

bymonmacllcapp

0•

Security & Testing

Implements the industry-standard Trail of Bits 5-step secure development workflow to audit smart contracts and identify vulnerabilities.

The Secure Workflow Guide is a specialized capability designed to embed professional-grade security practices directly into the smart contract development lifecycle. By following the renowned Trail of Bits 5-step process, it automates static analysis using Slither, validates upgradeability and ERC conformance, and generates visual architectural diagrams. Beyond automation, it assists developers in the critical task of documenting security properties for property-based fuzzing with Echidna and provides structured checklists for manual review of complex DeFi risks like MEV and flash loans. This skill is essential for teams aiming to minimize exploit surface area before mainnet deployment or third-party audits.

Key Features

01Visual security mapping including inheritance graphs and function access summaries.

02Automated Slither scans with 70+ detectors for immediate vulnerability identification.

030 GitHub stars

04Special feature validation for upgradeable proxies and ERC standard compliance.

05Structured guidance for documenting invariants and setting up Echidna/Manticore testing.

06Targeted manual review checklists for privacy, front-running, and DeFi-specific logic.

Use Cases

01Visualizing complex contract inheritance and authorization patterns for architectural reviews.

02Integrating consistent security checks and property documentation into the CI/CD workflow.

03Conducting a comprehensive security audit of Solidity smart contracts prior to deployment.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks secure-workflow-guide

For use in Claude.ai and ChatGPT

Download Skill