Solidity Security
Identifies Solidity smart contract vulnerabilities like reentrancy and overflows, providing remediation suggestions.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add lifangda-solidity-security npx -- -y @trustedskills/lifangda-solidity-security
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"lifangda-solidity-security": {
"command": "npx",
"args": [
"-y",
"@trustedskills/lifangda-solidity-security"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill, lifangda-solidity-security, provides expertise in identifying and mitigating security vulnerabilities within Solidity smart contracts. It can analyze contract code to detect common attack patterns like reentrancy, integer overflows/underflows, and denial of service risks. The skill aims to improve the overall robustness and safety of deployed blockchain applications.
When to use it
- Code Review: Before deploying a new smart contract, use this skill to proactively identify potential security flaws.
- Vulnerability Assessment: Analyze existing contracts for known vulnerabilities or weaknesses that could be exploited.
- Security Audits: Integrate the skill into your broader auditing process for more comprehensive coverage of Solidity code.
- Educational Purposes: Understand common attack vectors and learn how to write more secure smart contracts.
Key capabilities
- Vulnerability detection in Solidity smart contracts
- Identification of reentrancy attacks
- Detection of integer overflow/underflow vulnerabilities
- Analysis for denial-of-service risks
Example prompts
- "Analyze this Solidity code snippet for potential security vulnerabilities: [paste code]"
- "What are the common attack patterns I should be aware of when writing smart contracts?"
- "Review this contract and identify any reentrancy risks: [paste code]"
Tips & gotchas
The skill's effectiveness relies on providing clear and complete Solidity code. It is not a substitute for comprehensive security audits performed by human experts, but rather a valuable tool to augment the process.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.