Verified:GitHub

security

Reviews Solidity contracts for vulnerabilities and enforces pre-deploy security checklist patterns.

Updated Sep 9, 2026

Search Tags:#vulnerability #security audit #smart contracts #solidity #ethereum #reentrancy #defi

One-click install

npx skills add https://github.com/m-faran/genie-markets --skill security-m-faran

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/m-faran/genie-markets/tree/main/.agent/skills/ethskills/security
Command: npx skills add https://github.com/m-faran/genie-markets --skill security-m-faran

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Smart contract bugs cause irreversible financial losses, and most exploits stem from well-known patterns like reentrancy, oracle manipulation, and decimal mishandling that developers repeatedly miss. This Skill provides defensive Solidity implementations and a pre-deploy audit checklist to catch these vulnerabilities before deployment. ## Core Features & Use Cases - Vulnerability Patterns with Fixes: Covers reentrancy, token decimal mismatches, SafeERC20 usage, vault inflation attacks, infinite approvals, and access control with vulnerable vs. safe code examples. - MEV and Oracle Safety: Explains sandwich attack protection, slippage limits, Chainlink staleness checks, and why DEX spot prices must not be used as oracles. - Upgradeability and Signatures: Details UUPS proxy implementation rules, storage layout safety, EIP-712 replay protection, and delegatecall hazards. - Use Case: Before deploying a USDC-denominated prediction market contract, run through the 20+ item pre-deploy checklist covering access control, reentrancy guards, decimal handling, and automated analysis with Slither and Foundry fuzz tests. ## Quick Start Review my Solidity contract for security vulnerabilities and check it against the pre-deploy audit checklist.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What security tools should I run before deploying a contract?▼

Run Slither for static analysis, Mythril for symbolic execution, and Foundry fuzz tests with high run counts before deployment. Never ignore Slither findings about reentrancy, unchecked return values, arbitrary delegatecall, or unprotected state-changing functions.