跳转到主要内容
此内容尚未提供您的语言版本,正在以英文显示。

Solidity Security

技能 已验证 活跃

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

目的

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.

功能

  • Identify and mitigate reentrancy vulnerabilities
  • Prevent integer overflow/underflow issues
  • Implement robust access control mechanisms
  • Mitigate front-running attacks
  • Apply Checks-Effects-Interactions pattern
  • Utilize Pull Over Push pattern for payments
  • Perform thorough input validation
  • Implement emergency stop (circuit breaker)
  • Optimize gas usage
  • Prepare contracts for audits

使用场景

  • Writing secure smart contracts from scratch
  • Auditing existing Solidity code for vulnerabilities
  • Implementing secure DeFi protocols
  • Ensuring secure smart contract deployment
  • Learning about common blockchain attack vectors

非目标

  • Providing a fully automated security audit tool
  • Writing smart contract code automatically
  • Covering all possible blockchain vulnerabilities
  • Acting as a substitute for professional security audits

工作流

  1. Understand critical vulnerabilities (Reentrancy, Integer Overflow, Access Control, Front-Running)
  2. Learn secure coding patterns (Checks-Effects-Interactions, Pull Over Push, Input Validation, Circuit Breaker)
  3. Review gas optimization techniques
  4. Consult the common vulnerabilities checklist
  5. Prepare for audits with documented code

实践

  • Secure Coding Practices
  • Vulnerability Prevention
  • Smart Contract Auditing
  • Gas Optimization

Versioning

  • info:Release ManagementWhile there is a last commit date, there is no explicit versioning indicated in the SKILL.md frontmatter or manifest, and install instructions reference `main`.

安装

请先添加 Marketplace

/plugin marketplace add wshobson/agents
/plugin install blockchain-web3@claude-code-workflows

质量评分

已验证
98 /100
1 day ago 分析

信任信号

最近提交3 days ago
星标35.3k
许可证MIT
状态
查看源代码

类似扩展

Web3 Testing

99

Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking. Use when testing Solidity contracts, setting up blockchain test suites, or validating DeFi protocols.

技能
wshobson

Defi Protocol Templates

95

Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when building decentralized finance applications or smart contract protocols.

技能
wshobson

Soul Guardian

100

Drift detection + baseline integrity guard for agent workspace files with automatic alerting support

技能
prompt-security

Audit Dependency Versions

100

Audit project dependencies for version staleness, security vulnerabilities, and compatibility issues. Covers lock file analysis, upgrade path planning, and breaking change assessment. Use before a release to ensure dependencies are current and secure, during periodic maintenance reviews, after receiving a security advisory, when upgrading to a new language version, before submitting to CRAN or npm, or when inheriting a project to assess its dependency health.

技能
pjt222

Codex Diff Develop

100

Revisa el diff de la rama actual frente a develop en proyectos Drupal 11 siguiendo la metodología Codex (lógica de negocio, edge cases de hooks/queries, seguridad, performance, completitud). Genera un informe .md en la carpeta del IDE detectado (.antigravity/, .cursor/, .vscode/ o docs/) con hallazgos por severidad y soluciones accionables. Usar cuando el usuario pida "Revisión diff develop", "revisión diff develop", "diff develop", "revisar diff", "codex diff" o expresiones similares con intención de auditar cambios contra develop. Triggers: diff develop, codex diff, revisión diff, lint diff develop, auditar diff.

技能
j4rk0r

Aptos Gas & Performance Optimization Expert

99

Expert on Aptos gas optimization, performance tuning, storage costs, execution efficiency, inline functions, aggregator usage, parallel execution, table vs vector tradeoffs, and gas profiling tools. Triggers on keywords gas optimization, performance, gas cost, storage fee, inline, aggregator, parallel execution, gas profiling, optimization

技能
raintree-technology