Solidity Security
Analyzes Solidity code for common vulnerabilities like reentrancy, overflows, and insecure access controls.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add microck-solidity-security npx -- -y @trustedskills/microck-solidity-security
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"microck-solidity-security": {
"command": "npx",
"args": [
"-y",
"@trustedskills/microck-solidity-security"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill analyzes Solidity smart contract code to identify potential security vulnerabilities. It can detect common issues like reentrancy, integer overflows/underflows, and unchecked external calls. The goal is to improve the robustness and safety of decentralized applications (dApps).
When to use it
- Smart Contract Audits: Before deploying a new smart contract, use this skill to proactively identify and fix vulnerabilities.
- Code Review: Integrate into your development workflow for automated security checks during code review processes.
- Vulnerability Research: Analyze existing contracts to understand common attack vectors and improve overall Solidity security practices.
- Security Education: Use the skill's output to learn about different types of vulnerabilities and how to mitigate them.
Key capabilities
- Reentrancy detection
- Integer overflow/underflow analysis
- Unchecked external call identification
- Smart contract code analysis
Example prompts
- "Analyze this Solidity smart contract for potential security flaws: [paste contract code]"
- "Can you identify any reentrancy vulnerabilities in the following code? [paste contract code]"
- "Check this contract for integer overflow and underflow issues. [paste contract code]"
Tips & gotchas
The skill's effectiveness depends on the quality of the Solidity code provided. Complex or obfuscated contracts may yield less accurate results, requiring manual review alongside the skill’s output.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.