openclaw / solaudit-smart-contract-security-scanner
Install for your project team
Run this command in your project directory to install the skill for your entire team:
mkdir -p .claude/skills/solaudit-smart-contract-security-scanner && curl -L -o skill.zip "https://fastmcp.me/Skills/Download/4348" && unzip -o skill.zip -d .claude/skills/solaudit-smart-contract-security-scanner && rm skill.zipProject Skills
This skill will be saved in .claude/skills/solaudit-smart-contract-security-scanner/ and checked into git. All team members will have access to it automatically.
Important: Please verify the skill by reviewing its instructions before using it.
Solidity smart contract security auditor. Detect reentrancy, overflow, access control issues. 50+ vulnerability patterns. CI/CD ready. Free CLI tool.
0 views
0 installs
Skill Content
--- name: Solaudit - Smart Contract Security Scanner description: Solidity smart contract security auditor. Detect reentrancy, overflow, access control issues. 50+ vulnerability patterns. CI/CD ready. Free CLI tool. --- # Solaudit Security scanner for Solidity smart contracts. Find vulnerabilities before deployment. ## Installation ```bash npm install -g solaudit-cli ``` ## Commands ### Full Audit ```bash solaudit audit Contract.sol solaudit audit ./contracts/ -r # Recursive solaudit audit . -s high # Only high+ severity solaudit audit . --gas --best-practices # Include all checks ``` ### Quick Check ```bash solaudit check Token.sol solaudit check Vault.sol -s critical ``` ### Gas Analysis ```bash solaudit gas Contract.sol ``` ### List Patterns ```bash solaudit patterns solaudit patterns --category reentrancy ``` ## Vulnerability Detection ### Critical - Reentrancy attacks - Unprotected selfdestruct - Delegatecall injection - Signature replay ### High - Integer overflow/underflow - Access control issues - Unchecked return values - Price manipulation ### Medium - tx.origin authentication - Floating pragma - Timestamp dependence - Front-running risks ### Low - Unused variables - Missing events - Implicit visibility - Magic numbers ## Output Formats ```bash solaudit audit Contract.sol # Table (default) solaudit audit Contract.sol -o json # JSON solaudit audit Contract.sol -o markdown # Markdown report ``` ## CI/CD Integration ```bash # Fail on critical issues solaudit audit ./contracts/ -s critical && echo "Passed" # GitHub Actions - run: npm install -g solaudit-cli - run: solaudit audit ./contracts/ -r -s high ``` ## Common Use Cases **Pre-deployment check:** ```bash solaudit audit ./contracts/ -r -s high ``` **Generate audit report:** ```bash solaudit audit . -o markdown --save AUDIT.md ``` **Gas optimization:** ```bash solaudit gas Contract.sol ``` --- **Built by [LXGIC Studios](https://lxgicstudios.com)** 🔗 [GitHub](https://github.com/lxgicstudios/solaudit) · [Twitter](https://x.com/lxgicstudios)