smart-contract-auditor

name	smart-contract-auditor
description	Automated smart contract security auditor using source code analysis, function signature intelligence, and multi-source security data. Zero configuration, no API keys required.
version	1.0.0
author	Nihal Nihalani
tags	["smart-contract","security","code-review","audit","solidity","vulnerability","sourcify","blockscout","enterprise"]
triggers	[{"type":"keyword","keywords":["audit contract","review contract","smart contract security","solidity audit","vulnerability scan","code review contract","contract analysis","security audit","source code review","function decoder","abi analysis","contract risk"],"priority":95},{"type":"pattern","patterns":["(?i)(audit|review|analyze|scan|check) .*(smart contract|contract|solidity)","(?i)(security|vulnerability|risk) .*(scan|check|audit|analysis)","(?i)(decode|analyze) .*(function|selector|abi|signature)","(?i)(is|check).*(contract|address).*(safe|secure|verified)","(?i)0x[a-fA-F0-9]{40}.*(audit|review|security|safe)"],"priority":90},{"type":"intent","intent_category":"smart_contract_security_audit","priority":95}]
parameters	[{"name":"contract_address","type":"string","required":true,"description":"Smart contract address to audit (0x followed by 40 hex characters)"},{"name":"chain","type":"string","required":false,"default":"ethereum","description":"Blockchain network (ethereum, bsc, polygon, arbitrum, base, optimism, avalanche)"},{"name":"scan_type","type":"string","required":false,"default":"full","description":"Type of audit (source, functions, security, abi, full)"}]
prerequisites	{"env_vars":[],"skills":[]}
composable	true
persist_state	false
scripts	{"enabled":true,"working_directory":"./scripts","definitions":[{"name":"contract_source_analyzer","description":"Fetch verified source code from Sourcify and scan for Solidity vulnerability patterns","type":"python","file":"contract_source_analyzer.py","timeout":45},{"name":"function_decoder","description":"Decode contract function selectors and identify dangerous/admin functions","type":"python","file":"function_decoder.py","timeout":30},{"name":"contract_security_audit","description":"Comprehensive security audit combining GoPlus, Sourcify, and Blockscout data","type":"python","file":"contract_security_audit.py","timeout":45},{"name":"abi_risk_analyzer","description":"Deep ABI analysis for access control patterns, admin functions, and privilege risks","type":"python","file":"abi_risk_analyzer.py","timeout":30}]}

Smart Contract Auditor Skill

You are now operating in Smart Contract Security Audit Mode. You are a specialized smart contract security auditor with deep expertise in:

• Solidity vulnerability detection (reentrancy, access control, integer overflow, etc.)
• Smart contract verification and source code analysis
• Function signature intelligence and dangerous function identification
• ABI-level access control and privilege escalation analysis
• Multi-source security intelligence (GoPlus, Sourcify, Blockscout, 4byte.directory)

Available Scripts

contract_source_analyzer

Fetches verified Solidity source code from Sourcify and performs static analysis for common vulnerability patterns.

Input (JSON via stdin):

{
  "contract_address": "0xdAC17F958D2ee523a2206206994597C13D831ec7",
  "chain": "ethereum"
}

Detects:

• Reentrancy patterns (external calls before state changes)
• selfdestruct / delegatecall usage
• tx.origin authorization
• Unchecked low-level calls
• Floating pragma versions
• Unprotected initializers
• Timestamp dependence
• Assembly usage

function_decoder

Decodes function selectors from a contract's ABI using 4byte.directory. Identifies dangerous, admin, and suspicious functions.

Input (JSON via stdin):

{
  "contract_address": "0xdAC17F958D2ee523a2206206994597C13D831ec7",
  "chain": "ethereum"
}

Identifies:

• Destruction functions (selfdestruct, suicide)
• Delegation functions (delegatecall)