Open source alternatives to solidity-security

S

solidity-security

Comprehensive smart contract security patterns, vulnerability prevention

solidity-security is an agent skill from the wshobson/agents collection that covers smart contract security for Solidity, the language used for Ethereum contracts. It sets out the security patterns and vulnerability prevention practices for writing contracts that handle value, with the critical vulnerabilities explained alongside vulnerable code examples and secure versions of the same logic. The vulnerabilities covered include reentrancy, where a contract is called back before its state is updated, integer overflow and underflow, access control failures, and front-running, where transactions are reordered for profit. It also covers testing for security and optimizing gas use while keeping the code secure. The skill applies when writing secure smart contracts, auditing existing contracts for vulnerabilities, implementing DeFi protocols, preventing reentrancy, overflow and access control problems, balancing gas costs against security, preparing contracts for professional audits, and understanding common attack vectors. Its detailed patterns and worked examples are kept in a reference file that the agent reads when needed. Smart contracts that hold funds cannot be patched easily once deployed, and a skill's guidance does not replace an independent audit by security specialists before any contract goes live. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 15.1K installs and passing results from three security audits at the time of the scan.