solidity-audit-precheckAutomated pre-audit checklist for Solidity smart contracts. Runs SWC registry scan, OpenZeppelin pattern validation, gas optimization suggestions, and common...
Install via ClawdBot CLI:
clawdbot install samledger67-dotcom/solidity-audit-precheckGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
curl -L https://foundry.paradigm.xyz | bashCalls external URL not in known-safe list
https://foundry.paradigm.xyzAI Analysis
The skill instructs users to install standard, reputable developer tools via their official installation methods (curl to foundry.paradigm.xyz, pip, npm, cargo). This is consistent with the skill's stated purpose and does not involve sending user data, credential harvesting, or hidden malicious instructions. The risk is limited to the inherent trust in these external package managers and repositories.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
A decentralized finance protocol team uses the skill to scan their new lending or DEX contracts before engaging a costly manual audit from firms like Trail of Bits or Certik. It helps identify reentrancy risks, unsafe ERC20 transfers, and access control flaws, reducing audit scope and cost by catching basic vulnerabilities early.
An NFT marketplace startup applies the skill during internal PR reviews for contract updates, such as adding new minting features or royalty mechanisms. The automated checks validate OpenZeppelin usage, detect gas inefficiencies, and flag common issues like tx.origin usage, ensuring code is hardened before testnet deployment.
A corporation developing smart contracts for supply chain or tokenized assets uses the skill to onboard a new Solidity codebase, understanding its risk surface. It runs Slither and Mythril to catch vulnerabilities like integer overflows and delegatecall risks, providing a security baseline before internal audits or mainnet launch.
A blockchain gaming studio employs the skill after a major contract refactor for their play-to-earn game, checking for vulnerabilities like arbitrary ETH sends and weak access control. The pre-check workflow ensures that updates do not introduce new security flaws, saving time and money before a formal audit.
A decentralized autonomous organization (DAO) uses the skill to validate new governance or treasury management contracts before deployment. It scans for centralization risks, missing events on state changes, and reentrancy issues, helping the community trust the code before a manual audit and voting.
Offer a subscription-based service where clients run the pre-check skill before hiring manual auditors, reducing audit hours and fees. Charge a flat fee per contract scan or monthly retainer, targeting startups and enterprises to lower their security expenses while improving code quality.
Integrate the skill into a broader security consulting practice, using it as a preliminary tool to assess client contracts and upsell deeper manual audits or remediation services. This model leverages the skill to attract clients with quick insights and generate revenue from follow-on engagements.
Package the skill as part of a SaaS platform for developers, offering automated security scans alongside other tools like CI/CD integration and reporting dashboards. Monetize through tiered plans based on scan frequency, team size, or advanced features, appealing to development teams in crypto projects.
💬 Integration Tip
Set up the toolchain in a CI/CD pipeline to automatically run pre-checks on every code commit, ensuring continuous security monitoring and catching issues early in development.
Scored Apr 19, 2026
ERC-8004 Trustless Agents - Register, discover, and build reputation for AI agents on Ethereum. Use when registering agents on-chain, querying agent registries, giving/receiving reputation feedback, or interacting with the AI agent trust layer.
Understand blockchain technology, interact with smart contracts, and evaluate when distributed ledgers solve real problems.
有道云笔记资讯推送:基于收藏笔记分析关注话题,推送最新相关资讯。支持对话触发与每日定时推送(如早上9点)。触发词:资讯推送、设置资讯推送、生成资讯推送。
有道云笔记官方 skill,支持笔记 CRUD(创建/读取/更新/删除)、待办管理、网页剪藏、笔记搜索、文件夹管理等基础操作。如需构建知识库或 Wiki,请使用 youdaonote-llm-wiki skill 而非本 skill。
网页剪藏到有道云笔记。触发词:剪藏网页、保存网页、收藏网页。
Deploy ERC20 tokens on Base using Clanker SDK. Create tokens with built-in Uniswap V4 liquidity pools. Supports Base mainnet and Sepolia testnet. Requires PRIVATE_KEY in config.