Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.
solidity-security
solidity-security is an open-source security skill for Claude Code and compatible agents, published by wshobson. Its author describes it as: “Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures…”. The project has 39k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add wshobson/agents`.
What solidity-security does
Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.
Installation
Add solidity-security to your agent with:
/plugin marketplace add wshobson/agents Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
What's inside
The SKILL.md for solidity-security is organised into these sections:
- When to Use This Skill
- Detailed patterns and worked examples
- Testing for Security
- Audit Preparation
When to use it
Reach for solidity-security when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear MIT license — safe to read and adapt
- Ships in wshobson/agents, an established project with 38,890 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does solidity-security do?
- Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
- How do I install solidity-security?
- Run /plugin marketplace add wshobson/agents in your agent, then reload your skills. Review the source at https://github.com/wshobson/agents before installing.
- Is solidity-security free to use?
- Yes. solidity-security is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Where does solidity-security come from?
- solidity-security ships inside wshobson/agents, a repository that contains 54 catalogued skills in total. The repository's 38,890 GitHub stars apply to that whole collection, not to this skill on its own.
Related skills
More Security →You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.
Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.