Cairo Security
Analyzes Cairo code for common vulnerabilities like reentrancy and integer overflows, enhancing StarkNet contract safety.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add cairo-security npx -- -y @trustedskills/cairo-security
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"cairo-security": {
"command": "npx",
"args": [
"-y",
"@trustedskills/cairo-security"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill provides security auditing and vulnerability analysis specifically for Cairo smart contracts on the Starknet network. It can identify potential exploits, common coding errors, and areas of concern within Cairo code. The tool aims to improve the robustness and safety of Starknet decentralized applications (dApps).
When to use it
- Before deploying a new Cairo contract: Proactively assess for vulnerabilities before making your code live on Starknet.
- During security audits: Integrate into existing audit workflows to automate initial checks.
- When reviewing third-party contracts: Evaluate the security posture of smart contracts you intend to integrate with.
- After identifying potential exploits: Analyze affected contracts to understand and remediate vulnerabilities.
Key capabilities
- Cairo contract analysis
- Vulnerability identification
- Security auditing
- Exploit detection
- Coding error analysis
Example prompts
- "Analyze this Cairo code for security vulnerabilities: [paste Cairo code]"
- "Can you identify any potential exploits in this Starknet smart contract?"
- "Perform a security audit of the following contract and report any findings."
Tips & gotchas
This skill requires familiarity with Cairo programming language concepts. The analysis provided is not exhaustive, and manual review by experienced auditors remains crucial for comprehensive security assessments.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.