solidity-auditor

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By pashov/skills (GitHub) · security · 1,307 stars · scanned at commit eacfc09

Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename. Loop mode runs several passes in one scan, each pass told what the earlier ones found, and ends in one combined report; it remembers findings between scans in a ledger.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 10 places.

solidity-auditor/SKILL.md, line 19find . -type f -name '*.sol' \
solidity-auditor/SKILL.md, line 74mkdir -p .solidity-auditor/runs/{stamp}
solidity-auditor/SKILL.md, line 81printf '%s\t%s\n' name "{project-name}" >> .solidity-auditor/runs/{stamp}/scope.tsv

Show 7 more

solidity-auditor/SKILL.md, line 225printf '%s\t%s\n' passes_planned "{passes}" >> .solidity-auditor/runs/{stamp}/scope.tsv
solidity-auditor/SKILL.md, line 245cp .solidity-auditor/memory.tsv {bundle_dir}/memory-before.tsv 2>/dev/null || : > {bundle_dir}/memory-before.tsv
solidity-auditor/SKILL.md, line 298grep -ohE '(contract|library|interface)[[:space:]]+[A-Za-z0-9_]+|function[[:space:]]+[A-Za-z0-9_]+' {bundle_dir}/source.md \
solidity-auditor/SKILL.md, line 310awk -F'\t' -v OFS='\t' '
solidity-auditor/SKILL.md, line 335printf '%s\t%s\n' mem_before "$(( $(wc -l < {bundle_dir}/memory-before.tsv) - 1 ))" \
solidity-auditor/SKILL.md, line 348awk -F'\t' '
solidity-auditor/SKILL.md, line 429printf '%s\t%s\n' pass_{K}_failed 1 >> .solidity-auditor/runs/{stamp}/scope.tsv

Sends data to these websites: raw.githubusercontent.com

The author does not mention this. Expected for a security skill.

Found in 1 place.

solidity-auditor/SKILL.md, line 67e. Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/solidity-auditor/VERSION`

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'solidity-auditor' ] || [ -L ~/.agents/skills/'solidity-auditor' ]; then echo 'A skill folder named solidity-auditor already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/pashov/skills' "$d" && git -C "$d" checkout --quiet 'eacfc09b365d2697b83355909d0300607e596ffc' -- 'solidity-auditor' && mkdir -p ~/.agents/skills && cp -R "$d"/'solidity-auditor' ~/.agents/skills/'solidity-auditor' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'solidity-auditor' ~/.claude/skills/'solidity-auditor' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for pashov/skills shows the score of its lowest-scoring skill.

SkillTrust badge for pashov/skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/pashov/skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/pashov/skills/)

Score history

Date	Version	Score
2026-11-08	`eacfc09`	92
2026-11-07	`eacfc09`	92