Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
SOTA Skills
SOTA Skills is an open-source security skill for Claude Code, published by martinholovsky. Its author describes it as: “State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.”. The project has 8 stars on GitHub and is available under the CC-BY-4.0 license. Add it to your setup with `git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills`.
Installation
Add SOTA Skills to your agent with:
git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skillsAlways review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
When to use it
Reach for SOTA Skills when you want security help from Claude Code without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear CC-BY-4.0 license — safe to read and adapt
- Declares compatibility with Claude Code
- Actively maintained (recent commits)
Things to check
- Limited adoption so far — evaluate before depending on it
Topics
Frequently asked questions
- What does SOTA Skills do?
- State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
- How do I install SOTA Skills?
- Run git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills in your agent, then reload your skills. Review the source at https://github.com/martinholovsky/SOTA-skills before installing.
- Is SOTA Skills free to use?
- Yes. SOTA Skills is free and open source under the CC-BY-4.0 license, so you can read, run, and adapt it within that license's terms.
- Which agents does SOTA Skills work with?
- SOTA Skills declares compatibility with Claude Code. Agent Skills use a portable SKILL.md format, so other compatible clients can usually load it too.
Related skills
More Security →
Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.