awesome-solidity-skills

Skill from gonzaloetjo/awesome-solidity-skills

Awesome Solidity Skills Awesome

License: CC0-1.0GitHub StarsLast CommitPRs WelcomeLink Check

A curated list of Claude Code skills for Solidity and EVM smart contract development.

Contents

Security & Auditing

Skills focused on smart contract security analysis, vulnerability detection, and secure coding patterns.

  • Smart Contract Security - Comprehensive security auditing and vulnerability detection for Solidity smart contracts.
  • Solidity Audit Skills - Skill to audit Solidity contracts using Claude Code teams.
  • Building Secure Contracts - Smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework.
  • Entry Point Analyzer - Systematically identifies state-changing entry points in smart contract codebases to guide security audits.
  • Spec-to-Code Compliance - Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis.
  • Audit Context Building - Builds deep architectural context through ultra-granular code analysis before vulnerability hunting.
  • Differential Review - Security-focused differential review of code changes with git history analysis and blast radius estimation.
  • Fix Review - Verifies that code changes address security audit findings without introducing bugs.
  • Variant Analysis - Finds similar vulnerabilities and bugs across codebases using pattern-based analysis.
  • Static Analysis - Comprehensive static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.
  • SCV Scan - Scans Solidity codebases for security vulnerabilities by referencing 36 unique vulnerability types.
  • Solidity Audit Skill - Solidity smart contract security audits with MCP server for structured build, test, and audit tools.
  • Solidity Security Audit Skill - AI agent skill for Solidity smart contract security auditing and vulnerability detection.

Development & Architecture

Skills for Solidity smart contract architecture, development workflows, and best practices.

  • Solidity Development Expert - Expert-level Solidity architecture guidance and development best practices.
  • Ethereum Development - Full-stack Ethereum development including contracts, testing, and deployment.
  • Foundry Solidity Development - Modern Foundry 1.5.0 workflow for Solidity development and testing.
  • Arbitrum dApp Skill - Building dApps on Arbitrum using Stylus and Solidity with Foundry integration.
  • Ethereum Dev Skill - Ethereum development with viem, wagmi, Foundry, and Solidity.
  • Solidity Agent Kit - Agent skills for Solidity and DeFi development with Foundry covering security, testing, and deployment.
  • ContractKit - Smart contract workspace with Claude Code integration for Ethereum and Foundry.
  • Onchain TypeScript Skills - TypeScript blockchain development skills with Viem and Wagmi.
  • Ember Skills - Solidity, Web3, and deployment pattern skills extracted from real builds.
  • OP Stack Skills - Claude Code skills for working with OP Stack blockchains.
  • EVM Foundry - Foundry development for EVM chains covering forge, cast, anvil, testing, and deployment.
  • EVM Hardhat - Hardhat development for EVM chains covering project setup, compilation, testing, and deployment.
  • Viem - Using the viem TypeScript library for EVM development with fee currency support and transaction signing.
  • Wagmi - Wagmi React hooks for EVM dApps with wallet connection and transaction patterns.
  • EVM Wallet Integration - Wallet integration for dApps using RainbowKit and Dynamic.

Testing

Skills for smart contract testing strategies, frameworks, and coverage tools.

DeFi & Tokens

Skills for decentralized finance protocols, token standards, and NFT development.

  • DeFi Protocols Development - Development skills for DeFi protocol implementation and integration.
  • NFT Development - NFT smart contract development including ERC-721 and ERC-1155 standards.
  • NFT Mint Skill - ERC-721 NFT skill for deploying, minting, and transferring NFTs on Base and EVM chains.
  • 8004 Skill - ERC-8004 on-chain agent economy for registering agents and managing reputation across EVM chains.
  • Bridging - Cross-chain asset bridging between EVM chains covering native bridges and third-party solutions.

Deployment & Tooling

Skills for smart contract deployment, migration tools, and development infrastructure.

MCP servers and complementary tools for Solidity development with Claude.

  • Slither MCP - Trail of Bits' Slither static analysis framework as an MCP server for Claude.
  • Weasel - Solidity static analyzer with MCP integration for Claude Code, Cursor, and Windsurf.
  • Solodit API Skill - MCP server for searching smart contract vulnerabilities from Cyfrin Solodit.
  • Foundry MCP (Rust) - Rust MCP server exposing 170 Foundry tools with RPC discovery for 2400+ networks.
  • EVM MCP Tools - Blockchain analysis toolkit for smart contract auditing, wallet analysis, and on-chain data fetching.
  • EVM MCP - MCP server providing 20+ EVM JSON-RPC tools for any EVM-compatible node provider.
  • Arkham Intelligence Skill - Arkham Intelligence API integration for on-chain analytics, whale tracking, and smart money analysis.

Risky Repositories

These tools failed our security audit. They are listed here to call them out, not to recommend them. Review source code and permissions carefully before installing.

RepositoryRisk LevelWhy
EVM Wallet SkillDangerousGenerates and stores a private key at ~/.evm-wallet.json, giving the AI agent full hot wallet control. Mainnet-by-default across 6 chains.
MCP Crypto Wallet EVMDangerousExposes private keys and mnemonics to LLM context via wallet_get_private_key. Full wallet lifecycle management.
Blockchain MCPDangerousPrivate key passed as plaintext tool parameter through LLM context. Sends transactions on 7 mainnets.
EVM MCP ServerDangerousPrivate key/mnemonic via env vars across 60+ mainnet chains. HTTP mode binds to 0.0.0.0 (network-exposed).
Foundry MCP ServerDangerousExecutes arbitrary Forge scripts and sends mainnet transactions with configured private key. No testnet enforcement.
EVM Agent SkillsDangerousDefaults to Ethereum mainnet with transaction signing and broadcasting via cast. Very broad RPC permissions.
Crypto SkillsUnsafeToken Minter deploys contracts requiring signing. Write operations via EVM Swiss Knife. No testnet safeguards.

How to Install Skills

Claude Code skills extend your AI assistant with specialized knowledge for Solidity development. There are several ways to install them:

Quick Install

The fastest way to add a skill is with the npx add-skill command:

BASH
npx add-skill Smart-Contract-Security

Manual Installation

Clone the skill repository directly into your project's .claude/skills/ directory:

BASH
git clone https://github.com/author/skill-repo .claude/skills/skill-name

Scope

ScopeLocationEffect
Project.claude/skills/Available in the current project only
Global~/.claude/skills/Available across all projects

Contributing

Contributions are welcome! Please read the contributing guidelines first.