secure-workflow-guide

The secure-workflow-guide skill is designed to assist developers in implementing a comprehensive, five-step secure development workflow for smart contracts. By integrating automated analysis, visual inspection, and manual review, it aims to mitigate common vulnerabilities and enhance the overall security posture of blockchain-based applications. The skill provides a structured approach to identify and address security risks early in development, ensuring that contracts meet rigorous standards before deployment.

Its main capabilities include automated Slither scans to detect over 70 known vulnerabilities, checks for special features such as upgradeability, ERC conformance, and token integration, and generation of visual security diagrams that map inheritance, function access controls, and state variable authorization. Additionally, the skill guides the documentation of security properties for fuzzing and formal verification using tools like Echidna and Manticore, and it outlines areas for manual security review, including privacy, front-running, cryptography, and DeFi interactions. The workflow adapts dynamically based on the codebase, installed tools, and the project's development stage.

This skill is particularly useful for smart contract developers, security engineers, and auditors who need a systematic approach to security review. It can be applied during every code check-in, before deployment, or whenever a security assessment is required. By combining automated tools with guided manual checks, it helps teams maintain high security standards, reduce vulnerabilities, and provide clear documentation for verification and compliance purposes.