solidity-security
一般的な脆弱性を防ぎ、セキュアなSolidityパターンを実装するためのスマートコントラクトセキュリティのベストプラクティスをマスターします。スマートコントラクトを書く時、既存コントラクトを監査する時、またはブロックチェーンアプリケーションのセキュリティ対策を実装する時に使用してください。
Security Assessment
Detected risks:
About solidity-security
The 'solidity-security' skill provides best practices for securing smart contracts written in Solidity, the programming language for Ethereum-based applications. It aims to prevent common vulnerabilities such as reentrancy attacks, overflow/underflow, and improper access control, which can compromise the security and reliability of decentralized applications (dApps). This skill helps developers implement secure patterns and adopt defensive coding techniques that protect against these critical issues. The skill serves as an essential guide for writing secure smart contracts, auditing existing ones, and optimizing the security aspects of blockchain applications.
FAQ
What is the purpose of the 'solidity-security' skill?
This skill is designed to help developers implement secure smart contracts by providing best practices for preventing common vulnerabilities in Solidity, such as reentrancy attacks, overflow, and access control issues.
Is this skill compatible with all versions of Solidity?
The skill provides solutions for both Solidity versions prior to and after 0.8. For older versions, SafeMath is recommended to prevent overflow/underflow issues, while Solidity 0.8 and later automatically checks for these issues.
What should I do if I need to prevent reentrancy attacks?
You can prevent reentrancy attacks by following the 'Checks-Effects-Interactions' pattern, ensuring that state changes occur before external calls, or by using the 'ReentrancyGuard' modifier from OpenZeppelin's contracts library.
Can this skill help with auditing existing contracts?
Yes, the skill is also designed to assist in auditing existing contracts by identifying and mitigating common vulnerabilities, ensuring that they adhere to secure coding practices.
Is there any specific environment required to use the 'solidity-security' skill?
The skill can be applied in any Solidity-based development environment, such as Ethereum or compatible blockchain platforms. It does not have any specific environment or toolchain requirements beyond standard Solidity and contract auditing tools.
Install solidity-security
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
amurata/cc-tools