solidity-audit-precheckAutomated pre-audit checklist for Solidity smart contracts. Runs SWC registry scan, OpenZeppelin pattern validation, gas optimization suggestions, and common...
Install via ClawdBot CLI:
clawdbot install samledger67-dotcom/solidity-audit-precheckGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
curl -L https://foundry.paradigm.xyz | bashCalls external URL not in known-safe list
https://foundry.paradigm.xyzAI Analysis
The skill instructs users to install standard, reputable developer tools via their official installation methods (curl to foundry.paradigm.xyz, pip, npm, cargo). This is consistent with the skill's stated purpose and does not involve sending user data, credential harvesting, or hidden malicious instructions. The risk is limited to the inherent trust in these external package managers and repositories.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
A decentralized finance protocol team uses the skill to scan their new lending or DEX contracts before engaging a costly manual audit from firms like Trail of Bits or Certik. It helps identify reentrancy risks, unsafe ERC20 transfers, and access control flaws, reducing audit scope and cost by catching basic vulnerabilities early.
An NFT marketplace startup applies the skill during internal PR reviews for contract updates, such as adding new minting features or royalty mechanisms. The automated checks validate OpenZeppelin usage, detect gas inefficiencies, and flag common issues like tx.origin usage, ensuring code is hardened before testnet deployment.
A corporation developing smart contracts for supply chain or tokenized assets uses the skill to onboard a new Solidity codebase, understanding its risk surface. It runs Slither and Mythril to catch vulnerabilities like integer overflows and delegatecall risks, providing a security baseline before internal audits or mainnet launch.
A blockchain gaming studio employs the skill after a major contract refactor for their play-to-earn game, checking for vulnerabilities like arbitrary ETH sends and weak access control. The pre-check workflow ensures that updates do not introduce new security flaws, saving time and money before a formal audit.
A decentralized autonomous organization (DAO) uses the skill to validate new governance or treasury management contracts before deployment. It scans for centralization risks, missing events on state changes, and reentrancy issues, helping the community trust the code before a manual audit and voting.
Offer a subscription-based service where clients run the pre-check skill before hiring manual auditors, reducing audit hours and fees. Charge a flat fee per contract scan or monthly retainer, targeting startups and enterprises to lower their security expenses while improving code quality.
Integrate the skill into a broader security consulting practice, using it as a preliminary tool to assess client contracts and upsell deeper manual audits or remediation services. This model leverages the skill to attract clients with quick insights and generate revenue from follow-on engagements.
Package the skill as part of a SaaS platform for developers, offering automated security scans alongside other tools like CI/CD integration and reporting dashboards. Monetize through tiered plans based on scan frequency, team size, or advanced features, appealing to development teams in crypto projects.
💬 Integration Tip
Set up the toolchain in a CI/CD pipeline to automatically run pre-checks on every code commit, ensuring continuous security monitoring and catching issues early in development.
Scored Apr 19, 2026
Use this skill when the user wants to 'login/log in/sign in', 'authenticate', 'authorize', 'connect OKX account', 'set up credentials', 'first time setup', '...
当用户发起任意旅行相关问询时,包含但不限于:预订酒店、机票查询、火车票查询、景点推荐、寻找当地特色玩乐、目的地查询、行程规划、美食住宿攻略、签证、查询旅游攻略、获取旅行建议等场景,自动触发此技能。当用户需要操作携程、Ctrip、携程问道时使用此skill。
Manage aibtc-worker automation tasks. Use this skill when the user wants to start, stop, or check the status of the aibtc worker. Triggers include: "aibtc ru...
Track AI token usage and costs across providers. Import sessions, view dashboard, costs breakdown, and compare Max plan savings.
空投猎人,自动发现潜在空投机会,追踪已参与项目状态。每次调用收费0.001 USDT。触发词:空投、airdrop、撸毛、白名单、空投查询。
Maintain your agent on-chain identity (ERC-8004) on BNB Chain. Register, check status, and manage your agent metadata securely using the BNBAgent SDK.