What kind of vulnerabilities can this skill find?

It focuses on state consistency, access control flaws, external call risks (like reentrancy), and logical errors in DeFi patterns such as oracle integration and vault accounting.

How does this skill manage large Solidity projects?

It uses a lean discovery method with Grep to identify functions and contract structures, then splits the workload across multiple parallel background agents to stay within context limits.

Can I intervene during the audit process?

Yes. The skill is designed with a human-in-the-loop approach, specifically asking for your input on design decisions in Stage 0 and classification of findings in Stage 4.

Do I need Slither installed to use this skill?

While not strictly required, having Slither installed is highly recommended. The skill will automatically detect it and incorporate its static analysis results into the audit report.

Where are the audit results stored?

All findings, maps, and design decisions are saved as structured markdown files within the 'docs/audit/function-audit/' directory of your project.

Solidity Function Auditor

Name: Solidity Function Auditor
Author: gonzaloetjo

bygonzaloetjo

0•

安全与测试

Performs comprehensive, multi-stage security audits of Solidity smart contracts using parallelized analysis and human-in-the-loop review.

The Solidity Function Audit skill provides a rigorous, 6-stage workflow designed to identify vulnerabilities in smart contracts while minimizing false positives. It begins by capturing developer intent and design decisions, then leverages parallel background agents to map state variables, access controls, and external calls. By integrating Slither static analysis with deep AI-driven domain inspections, the skill generates structured markdown reports. It concludes with an interactive review process where developers can classify findings and request re-evaluations, ensuring a high-signal security assessment for DeFi and Web3 projects.

主要功能

01Comprehensive mapping of state variables, access controls, and external calls

020 GitHub stars

03Multi-stage parallelized analysis using specialized background agents

04Structured human-in-the-loop review and dispute resolution workflow

05Automated Slither static analysis integration and findings mapping

06Interactive Stage 0 capture of design decisions and developer intent

使用场景

01Automating complex logic audits across large, multi-domain Solidity projects

02Standardizing security documentation and audit trails for smart contract development

03Pre-deployment security hardening for DeFi protocols and token contracts

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add gonzaloetjo/solidity-audit-skills solidity-function-audit

For use in Claude.ai and ChatGPT

Download Skill