Chainlink Integration Patterns

Audit Solidity smart contracts for Chainlink Price Feed, VRF, CCIP, and Automation vulnerabilities.

66|17|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/BitterSecurity/Vigilo --skill chainlink-integration-patterns-bittersecurity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Chainlink Integration Patterns
Source: https://github.com/BitterSecurity/Vigilo/tree/main/packages/claude/skills/integration-patterns/chainlink
Command: npx skills add https://github.com/BitterSecurity/Vigilo --skill chainlink-integration-patterns-bittersecurity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Smart contracts integrating Chainlink services often contain subtle security flaws like missing staleness checks, wrong decimal handling, or absent L2 sequencer validation that lead to exploitable vulnerabilities. This Skill provides auditors with concrete detection patterns and secure code references for every major Chainlink service. ## Core Features & Use Cases - Price Feed Auditing: Detects missing freshness checks, zero-price validation, round completeness, and L2 sequencer uptime verification with heartbeat reference tables. - VRF Security Review: Identifies front-running risks, insufficient request confirmations, and missing commit-reveal patterns in randomness consumers. - CCIP and Automation Checks: Validates source chain and sender allowlisting in cross-chain messages, plus re-validation logic in Keeper performUpkeep functions. - Use Case: While auditing a lending protocol on Arbitrum, use this Skill to confirm the contract checks the Chainlink sequencer uptime feed and enforces a grace period before consuming price data. ## Quick Start Audit this Solidity contract's Chainlink price feed integration for stale price and sequencer downtime vulnerabilities.

Frequently Asked Questions about Chainlink Integration Patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Chainlink price feed integration in Solidity?▼

Check that the contract validates price > 0, verifies updatedAt is within the feed's heartbeat, and confirms answeredInRound >= roundId. On L2 chains like Arbitrum or Optimism, also verify the sequencer uptime feed is checked with a grace period.

What are common Chainlink VRF vulnerabilities in smart contracts?▼

Common VRF issues include front-running when results are predictable, insufficient requestConfirmations enabling reorg attacks, and missing requestId-to-user mapping. Use at least 3 confirmations on mainnet and a commit-reveal pattern for sensitive outcomes.

Does Chainlink price feed auditing differ on Arbitrum or Optimism?▼

Yes, L2 deployments must check the Chainlink sequencer uptime feed before consuming prices. When the sequencer goes down and recovers, a grace period of around one hour must pass before prices are trusted again.

Why is a stale price check important for Chainlink oracles?▼

Without a freshness check on updatedAt, contracts can act on outdated prices during feed outages or network congestion. Attackers exploit stale prices for undercollateralized loans or unfair liquidations in lending protocols.

What validations does a Chainlink CCIP receiver contract need?▼

A CCIP receiver must validate the source chain selector against an allowlist and decode and verify the sender address. Missing these checks lets any cross-chain sender trigger arbitrary message processing in the receiving contract.