solidity-security

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

by wshobson 39k GitHub stars MIT Updated Aug 24, 2026
solidity-security skill by wshobson
solidity-security — Security skill by wshobson

Overview

solidity-security is an open-source security skill for Claude Code and compatible agents, published by wshobson. Its author describes it as: “Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures…”. The project has 39k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add wshobson/agents`.

What solidity-security does

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

What’s inside

The SKILL.md for solidity-security is organised into these sections:

  • When to Use This Skill
  • Detailed patterns and worked examples
  • Testing for Security
  • Audit Preparation

Installation

Add solidity-security to your agent with:

/plugin marketplace add wshobson/agents

Review a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.

Supported agents

  • Claude Code — ships a claude code plugin marketplace
  • Codex — declared in the repository topics
  • Cursor — declared in the repository topics
  • OpenCode — declared in the repository topics
  • GitHub Copilot — declared in the repository topics
  • Antigravity — declared in the repository topics

License

solidity-security is published under the MIT license.

Strengths

  • Clear MIT license — safe to read and adapt within its terms
  • Ships in wshobson/agents, an established project with 39,066 GitHub stars
  • Works with Claude Code, Codex, Cursor, OpenCode, GitHub Copilot, Antigravity
  • Actively maintained — repository updated in the last 90 days
  • Its repository gained 669 GitHub stars over the last 24 days

Author

wshobson 54 skills in the catalog · GitHub profile ↗
View skills

Topics

Need a skill like this, tailored to your team?Build a custom skill →

Frequently asked questions

What does solidity-security do?
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
How do I install solidity-security?
Run /plugin marketplace add wshobson/agents in your agent, then reload your skills. Review the source at https://github.com/wshobson/agents before installing.
Is solidity-security free to use?
Yes. solidity-security is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
Which agents does solidity-security work with?
solidity-security lists Claude Code, Codex, Cursor, OpenCode, GitHub Copilot, and Antigravity — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
Where does solidity-security come from?
solidity-security ships inside wshobson/agents, a repository that contains 54 catalogued skills in total. The repository's 39,066 GitHub stars apply to that whole collection, not to this skill on its own.

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

↑ GrowingActive Claude CodeCodexCursor+2
47k GitHub stars MIT Updated Sep 21, 2026 Free

Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.

↑ GrowingActive Claude CodeCodexCursor+2
47k GitHub stars MIT Updated Sep 21, 2026 Free

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.

↑ GrowingActive Claude CodeCodexCursor+2
47k GitHub stars MIT Updated Sep 21, 2026 Free

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

Claude CodeCodexCursor+1
25k GitHub stars MIT Updated Aug 17, 2026 Free

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.

Claude CodeCodexCursor+1
25k GitHub stars MIT Updated Aug 17, 2026 Free