Solidity Debug
Identifies potential vulnerabilities and errors in Solidity code through static analysis and automated debugging suggestions.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add solidity-debug npx -- -y @trustedskills/solidity-debug
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"solidity-debug": {
"command": "npx",
"args": [
"-y",
"@trustedskills/solidity-debug"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The solidity-debug skill enables AI agents to analyze Solidity smart contracts for vulnerabilities, logic errors, and optimization opportunities. It leverages static analysis techniques to inspect bytecode and source code without requiring a live blockchain environment.
When to use it
- Reviewing newly written smart contract code before deployment to catch reentrancy or overflow risks.
- Auditing third-party libraries integrated into your project for known security flaws.
- Generating detailed reports on gas inefficiencies within complex transaction flows.
- Validating that specific security patterns, such as checks-effects-interactions, are correctly implemented.
Key capabilities
- Performs deep static analysis of Solidity source files.
- Identifies common vulnerability classes like reentrancy and integer overflows.
- Provides actionable recommendations for code refactoring.
- Supports multiple Solidity versions for compatibility checking.
Example prompts
- "Analyze this ERC-20 token contract for potential security vulnerabilities and list the high-risk functions."
- "Review the provided smart contract logic to identify any gas optimization opportunities in the transfer function."
- "Check if this bridge contract correctly implements the checks-effects-interactions pattern to prevent reentrancy attacks."
Tips & gotchas
Ensure you provide the full source code or a complete file path, as partial snippets may lead to incomplete analysis. While effective for static issues, remember that this skill does not simulate live network interactions or runtime state changes.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.