Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →dicklesworthstone/solidity-security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.
Passed 23 of 23 test cases with the skill, and 20 of 23 without it.
and 3 more in the full report
3 fixed20 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are preparing our token vault contract for an external security audit. Please review our access control and authorization logic, identify any unsafe authentication patterns or missing modifiers, and update the contract with full NatSpec annotations and input validation checks.
| Checked | Without skill | With skill |
|---|---|---|
| Replaces tx.origin with msg.sender for authorization checks | Missed | Passed |
| Adds validation checking that recipient addresses do not equal address(0) | Missed | Passed |
| Includes @notice NatSpec annotations on public or external contract functions | Missed | Passed |
The instructions your model reads when the skill loads.
Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.
Attacker calls back into your contract before state is updated.
Vulnerable Code:
// VULNERABLE TO REENTRANCY
contract VulnerableBank {
mapping(address => uint256) public balances;
function withdraw() public {
uint256 amount = balances[msg.sender];
// DANGER: External call before state update
(bool success, ) = msg.sender.call{value: amount}("");
require(success);
balances[msg.sender] = 0; // Too late!
}
}
Secure Pattern (Checks-Effects-Interactions):
test cases passed, vs 20 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.