Solidity Security
Helps with scaffolding, security as part of implementing security and authentication workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add scaffold-eth-solidity-security npx -- -y @trustedskills/scaffold-eth-solidity-security
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"scaffold-eth-solidity-security": {
"command": "npx",
"args": [
"-y",
"@trustedskills/scaffold-eth-solidity-security"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill provides automated security checks and remediation suggestions for Solidity smart contracts. It helps identify common vulnerabilities like reentrancy, integer overflows, and gas limit issues. The tool aims to improve the overall security posture of Ethereum-based projects by proactively finding and fixing potential problems.
When to use it
- During Smart Contract Development: Integrate into your development workflow to catch vulnerabilities early on.
- Before Deployment: Run a final security audit before deploying contracts to the blockchain.
- Code Review Process: Use as part of a code review process to ensure security best practices are followed.
- Security Audits: Supplement manual audits with automated checks for increased efficiency and thoroughness.
Key capabilities
- Automated vulnerability scanning
- Remediation suggestions
- Identification of common Solidity vulnerabilities (e.g., reentrancy, overflows)
- Gas limit analysis
Example prompts
- "Analyze this Solidity code for security vulnerabilities: [paste code]"
- "Find potential gas limit issues in my contract."
- "Suggest remediations for the identified integer overflow vulnerability."
Tips & gotchas
This skill is most effective when used alongside manual security reviews. While it automates many checks, it's not a replacement for expert human analysis of smart contract code.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.