Scan Solidity codebases for security vulnerabilities and generate severity-ranked reports.
npx skills add https://github.com/Zodomo/DrandVerifier --skill scv-scan-zodomo
Please help me install this Agent Skill. Skill: scv-scan Source: https://github.com/Zodomo/DrandVerifier/tree/main/.opencode/skills/kadenzipfel/scv-scan Command: npx skills add https://github.com/Zodomo/DrandVerifier --skill scv-scan-zodomo
SCV Scan helps you systematically audit Solidity code for known security vulnerabilities by combining a fast sweep with reference-backed validation, reducing missed issues and false positives.
Ask it to audit your Solidity repository by running the scv-scan skill inside your project folder, then review the generated scv-scan.md report for a severity-ranked list of confirmed issues.
High-intent search queries and answers about installing and using this skill.
To audit a Solidity codebase, run a two-pass sweep that combines syntactic keyword matching with semantic code analysis to detect known vulnerabilities. This process validates potential issues against reference heuristics to produce a severity-ranked report.
Vulnerability scanning reduces false positives by using selective deep validation. For each candidate finding, it reads the full reference file and checks preconditions and false-positive conditions before confirming the issue and generating a severity-ranked report.
No, grep-based static analysis alone cannot reliably detect all smart contract vulnerabilities. A two-pass codebase sweep is recommended, combining syntactic keyword scanning with a semantic read-through to catch issues that pattern matching misses.
The best way to generate a severity report is to scan the Solidity codebase using a vulnerability cheatsheet, perform a two-pass sweep, and validate candidates against detailed reference heuristics. This outputs confirmed findings with remediation guidance.
Yes, you need an existing smart-contract repository to scan Solidity code for security vulnerabilities. The auditing process runs inside your project folder to systematically analyze the codebase and output a generated severity-ranked report.
klu-devAudit Solidity AMM contracts against a security checklist for common vulnerabilities.
kadenzipfelScan Solidity codebases for security vulnerabilities and produce severity-ranked reports.
79yuukiAudit Solidity smart contracts for high-severity loss-of-funds vulnerabilities.
ChatAndBuildScan Cairo/StarkNet smart contracts for arithmetic, messaging, and address conversion vulnerabilities.
