Defi Security
Analyzes DeFi smart contracts for vulnerabilities like reentrancy, overflows, and front-running risks with expert precision.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add defi-security npx -- -y @trustedskills/defi-security
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"defi-security": {
"command": "npx",
"args": [
"-y",
"@trustedskills/defi-security"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill empowers AI agents to perform security audits and risk assessments specifically for DeFi protocols. It leverages the Solidity Agent Kit to analyze smart contract code, identify vulnerabilities, and evaluate potential threats within decentralized finance ecosystems.
When to use it
- Before deploying a new smart contract to production to catch critical bugs early.
- During due diligence when evaluating the safety of an existing DeFi protocol or dApp.
- To simulate attack vectors and test the resilience of financial logic against exploits.
- When integrating third-party libraries into a DeFi application to ensure no supply chain risks exist.
Key capabilities
- Automated analysis of Solidity smart contract code for security flaws.
- Identification of common DeFi-specific vulnerabilities such as reentrancy and overflow issues.
- Risk assessment generation based on the findings from the code review.
- Integration with the
solidity-agent-kitframework for deep technical inspection.
Example prompts
- "Audit this Solidity contract for potential reentrancy attacks before we deploy it."
- "Analyze the security posture of this DeFi lending protocol's smart contracts."
- "Identify any overflow or underflow vulnerabilities in this token swap function."
Tips & gotchas
Ensure you provide clean, compilable Solidity code to the agent for the most accurate analysis. While this tool is powerful for static analysis, it should be complemented with live testing and formal verification for high-value assets.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.