Smart Contract Vulnerability Auditor

Hvad det gør

Kører en tjeklistedrevet gennemgang af Solidity-kode: reentrancy, adgangskontrol, orakelmanipulation, integer-kantsager. Kategori med høj risiko — vi tester mod kontrakter med kendte, offentliggjorte exploits og tæller, hvad det fanger.

Installation

git clone https://github.com/trailofbits/skills-curated.git
cd skills-curated
mkdir -p ~/.claude/skills
cp -r plugins/scv-scan/skills/scv-scan ~/.claude/skills/smart-contract-review
# NOTE: SKILL.md tells the agent to read {baseDir}/skills/scv-scan/references/CHEATSHEET.md,
# a path that assumes the plugin's nested layout (baseDir = plugin root). After the flat copy
# above, either edit those in-body paths down to references/... or skip the flat copy and
# install the whole plugins/scv-scan/ folder as a Claude Code plugin instead.

Kommandoer og eksempelprompter

• /smart-contract-reviewStrukturerede sikkerhedsgennemgange af Solidity-kontrakter.

Skills udløses af almindelige forespørgsler — ingen kommandoer at huske. Efter installationen aktiverer prompter som disse skillen (på engelsk):

• Review this Solidity contract for reentrancy vulnerabilities
• Check this contract's access control before we deploy it
• Run a security checklist against this smart contract