Solidity Security
ListedIdentifies common Solidity vulnerabilities like reentrancy, overflows, and front running for secure smart contract development.
Install on your platform
Showing Claude Code. One command installs this skill into any of the agents below.
- 1
Run this in your project
terminal$ npx skills add sickn33/agentic-awesome-skills --skill solidity-security -a claude-code Uses the open-source
skillsCLI and needs Node.js. Add-gto install it for your user instead of this project.
What we know about this skill
Publisher
sickn33
Taken from the source listing. We haven't verified who controls this account.
Install target
Live repository
Not pinned. Installing fetches whatever the repository holds at the time you run the command.
Automated safety checks
This skill failed 1 of 6 checks. A failure is not proof of bad intent; it means something in the code needs a human to look at it before you run it.
Declares what it does: failed
No SKILL.md was found in the skill's directory.
SKILL.md exists, its frontmatter parses, and it declares a name and a description.
No undeclared network calls: passed
Makes no network calls.
Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.
No obfuscated payloads: passed
No encoded or obfuscated payloads.
No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.
No credential access: passed
Reads no keys, tokens, keychains or credential files.
Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.
No pipe-to-shell installers: passed
No pipe-to-shell or download-and-run installers.
No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.
Pinned to a commit: passed
Scanned sickn33/antigravity-awesome-skills at 5a4cdd9df8.
The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.
- Commit
- 5a4cdd9df8
- Scanned
- 0 files
- Copies in repo
- 3 — all of them scanned
About this skill
What it does
This skill helps AI agents master smart contract security best practices and identify vulnerabilities in Solidity code. It enables secure development patterns, assists with auditing existing contracts, and provides actionable steps to prevent common issues like reentrancy, overflows, and access control problems. The skill also focuses on optimizing gas usage while maintaining a high level of security for your smart contracts.
When to use it
- Writing new, secure smart contracts.
- Auditing existing Solidity code for potential vulnerabilities.
- Implementing secure decentralized finance (DeFi) protocols.
- Preparing smart contracts for professional security audits.
- Understanding common attack vectors targeting Solidity-based systems.
Key capabilities
- Vulnerability prevention in Solidity code.
- Identification of reentrancy, overflow, and access control issues.
- Guidance on secure development patterns.
- Optimization of gas usage while maintaining security.
- Provides actionable steps and verification for identified vulnerabilities.
Example prompts
- "Analyze this Solidity contract for potential reentrancy attacks."
- "What are the common overflow vulnerabilities in smart contracts, and how can I prevent them?"
- "Review this code snippet and suggest improvements to enhance its security before a professional audit."
Tips & gotchas
- The skill is specifically designed for Solidity security; avoid using it for tasks outside of this scope.
- Always validate the output with environment-specific testing and expert review, as this skill's results are not a substitute for those processes.
- If you’re unsure about required inputs or success criteria, the agent may ask for clarification to ensure accurate analysis.