Individual skill
auditing-foundry-smart-contract-security
Pre-deployment security audit of Solidity smart contracts in a Foundry project. Combines static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testing (forge fuzz + invariant tests with handlers) to catch reentrancy, access-control, oracle/price manipulation, and arithmetic bugs BEFORE deploying to an EVM chain. Also enforces key hygiene (no plaintext private keys, encrypted cast keystore) and a secure deploy workflow. Use when writing, reviewing, testing, or deploying Solidity/Foundry contracts, building a dApp, or working with forge/cast/anvil, MetaMask, or Web3/DeFi code.
skills/auditing-foundry-smart-contract-security/SKILL.md
Source commit 54a798831d2266a3ca61ce68a7acb80b81160d57
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 35,957
- Repository last updated
- Aug 31, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-agents Repository topic
- claude-code Repository topic
- cybersecurity Repository topic
- incident-response Repository topic
- mitre-attack Repository topic
- penetration-testing Repository topic
- red-team Repository topic
- security Repository topic
- cloud-security Repository topic
- malware-analysis Repository topic
- solidity Declared skill tag
- foundry Declared skill tag
- forge Declared skill tag
- smart-contract Declared skill tag
- slither Declared skill tag
- aderyn Declared skill tag
- mythril Declared skill tag
- reentrancy Declared skill tag
- defi Declared skill tag
- web3 Declared skill tag
- invariant-testing Declared skill tag
- audit Declared skill tag
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
LICENSEasset · 11,255 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesSKILL.mdcore · 7,627 bytesreferences/api-reference.mddoc · 6,604 bytesreferences/secure-deployment-and-keys.mddoc · 4,171 bytesreferences/vulnerability-checklist.mddoc · 4,955 bytesscripts/agent.pyruns · 13,779 bytes
Read excerpt
# Auditing Foundry Smart Contract Security
## Overview
Deployed smart contracts are **immutable** and custody **real funds**, so a bug
shipped to mainnet cannot be patched — it can only be exploited. Most catastrophic
DeFi losses come from a small set of recurring classes: reentrancy, broken access
control, oracle/price manipulation, and unchecked arithmetic or external calls.
This skill runs a **defense-in-depth, pre-deployment audit** of a Foundry project,
layering four independent techniques that each catch what the others miss:
1. **Static analysis** — `slither` (90+ detectors) and `aderyn` (Cyfrin, Rust) scan
the AST/IR in seconds for known anti-patterns.