security-audit

Smart contract security audit assistant powered by Solodit API. Search 50,000+ vulnerabilities, fetch contracts from 40+ chains, run static analysis, generate PoC exploits and audit reports.

Jump to install

Repository: XSpoonAi/spoon-awesome-skill
Last source activity: March 25, 2026 at 04:09
Detected SKILL.md language: English
Stars: 17
Forks: 44

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/XSpoonAi/spoon-awesome-skill --skill security-audit

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

27 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

name	security-audit
description	Smart contract security audit assistant powered by Solodit API. Search 50,000+ vulnerabilities, fetch contracts from 40+ chains, run static analysis, generate PoC exploits and audit reports.
version	1.0.0
author	OS-Lihua <os-lihua@users.noreply.github.com>
tags	["security","audit","vulnerability","solodit","slither","aderyn","exploit","poc","smart-contract"]

Security Audit Skill

Smart contract security audit assistant powered by Solodit API and professional audit tools.

Quick Start

# Search vulnerabilities
python3 scripts/solodit_api.py search --keywords "reentrancy" --impact HIGH

# Fetch contract from Etherscan URL
python3 scripts/fetch_contract.py "https://etherscan.io/address/0x..."

# Detect project framework
python3 scripts/project_detector.py /path/to/project

Scripts

Script	Purpose
solodit_api.py	Search Solodit vulnerability database
fetch_contract.py	Fetch verified contracts from 40+ chains
project_detector.py	Detect project framework and chain type

Environment Variables

Variable	Required	Description
`SOLODIT_API_KEY`	Yes	Solodit API key from https://solodit.cyfrin.io
`ETHERSCAN_API_KEY`	No	Etherscan API key for fetching contracts
`BSCSCAN_API_KEY`	No	BSCScan API key
`ARBISCAN_API_KEY`	No	Arbiscan API key

Capabilities

Search Vulnerabilities - Query 50,000+ findings from top audit firms (Cyfrin, Sherlock, Code4rena, etc.)
Fetch Contracts - Download verified source code from 40+ blockchain explorers
Detect Frameworks - Auto-detect project framework (Foundry, Hardhat, Anchor, etc.)
Static Analysis - Run Slither, Aderyn, Mythril for automated scanning
Fuzz Testing - Echidna, Medusa, Foundry for invariant testing
PoC Generation - Templates for reentrancy, flash loan, oracle manipulation exploits
Report Generation - Code4rena, Sherlock, Cyfrin style audit reports

Best Practices

Always verify contract source before auditing
Use multiple static analysis tools for comprehensive coverage
Search Solodit for similar vulnerabilities in related protocols
Write PoC tests to confirm findings
Follow severity guidelines when rating issues

security-audit

Source facts

Install options

Review the source files

More from this repository

More from this repository

Security Audit Skill

Quick Start

Scripts

Environment Variables

Capabilities

Best Practices

Security Audit Skill

Quick Start

Scripts

Environment Variables

Capabilities

Best Practices