security-smart-contracts - Four-phase Solidity and EVM security review

What this skill does

• Map contracts, dependencies, and roles
• Trace asset and trust flows
• Run syntactic and semantic sweeps
• Run available security analyzers
• Validate exploitability with code evidence
• Design invariant and property fuzzing
• Deduplicate and report findings

Inputs

• Solidity and EVM project source
• Project source root
• Dependency and fork versions
• Role and deployment configuration
• Protocol trust assumptions
• Tooling and invariant references

Outputs

• Deduplicated candidate list
• Evidence-backed security findings
• Discarded candidate reasons
• Invariant and fuzzing properties
• Review report
• External scan artifacts
• Tool installation commands

Requirements

Source

• Spec: SKILL.md