Skip to content

Search skills.../

Agent Skill Search Engine

Search

Search
Categories
Occupations

About

About
Privacy
Terms

© 2026 Skills Pool. All rights reserved.

Review Contract | Skills Pool

Skill File

Review Contract

Security review a Solidity smart contract for vulnerabilities and best practices

Krishna27090 starsMar 31, 2026

Occupation: Information Security Analysts
Categories: Smart Contracts

Skill Content

Security review a contract

Review: $ARGUMENTS

Read the contract in ARIA/contracts/ and both contracts for cross-reference context.

Check for vulnerabilities

Access Control:

State-changing functions have access control (onlyOwner, roles)
Owner not zero address after construction
No unprotected init functions
Consider Ownable pattern for transferability

Reentrancy:

No external calls before state changes (checks-effects-interactions)
No callbacks to untrusted addresses

Related Skills

Quick Install

Review Contract

npx skillvault add Krishna2709/krishna2709-project-aria-claude-skills-review-contract-skill-md

Download Skill Open repository

Author: Krishna2709
stars: 0
Updated: Mar 31, 2026
Occupation

On this page

01Security review a contract

Integer Issues:

Solidity 0.8.20 overflow protection confirmed
Division by zero guarded
Safe uint256→uint8 casts (truncation risk)

Gas & DoS:

No unbounded loops over arrays
Array growth controlled (rejections[] could grow large)
String params bounded in practice

General:

Events emitted for all state changes
View functions don't modify state
No selfdestruct or delegatecall
Constructor initializes all critical state

ERC-8004 Integration:

Validator interfaces correctly with Validation Registry
Agent ID properly set and used
Score calculation correct (0-100)

Report by severity

Critical — funds at risk, access control bypass
High — logic errors, DoS vectors
Medium — gas inefficiency, missing validations
Low — code style, documentation
Informational — suggestions

For each finding: description, line number, severity, recommended fix.

02

Check for vulnerabilities

03Report by severity

Smart Contracts

Defi Amm Security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

Smart Contracts

Nodejs Keccak256

Prevent Ethereum hashing bugs in JavaScript and TypeScript. Node's sha3-256 is NIST SHA3, not Ethereum Keccak-256, and silently breaks selectors, signatures, storage slots, and address derivation.

Smart Contracts

Syncable Entity Builder And Validation

Create validation logic and migration action builders for syncable entities in Twenty. Use when implementing business rule validation, uniqueness checks, foreign key validation, or building workspace migration actions for syncable entities. Validators never throw and never mutate.

Nft Standards

Implement NFT standards (ERC-721, ERC-1155) with proper metadata handling, minting strategies, and marketplace integration. Use when creating NFT contracts, building NFT marketplaces, or implementing digital asset systems.

Solidity Security

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

Defi Protocol Templates

Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when building decentralized finance applications or smart contract protocols.

Information Security Analysts