CtrlK
BlogDocsLog inGet started
Tessl Logo

solidity-security

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

79

1.00x
Quality

72%

Does it follow best practices?

Impact

94%

1.00x

Average score across 3 eval scenarios

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./tests/ext_conformance/artifacts/agents-wshobson/blockchain-web3/skills/solidity-security/SKILL.md

The canonical home for this skill is solidity-security in wshobson/agents

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A thorough, code-rich security reference with strong actionable examples, but it is over-long with redundant examples, lacks a sequenced audit workflow with validation feedback loops, and advertises reference files that are missing from the bundle.

Suggestions

Consolidate the three repetitions of the Checks-Effects-Interactions pattern into a single canonical example and reference it, trimming the body's length.

Add an explicit step-by-step audit workflow with validation checkpoints (e.g., scan with Slither -> review findings -> fix -> re-scan) instead of leaving the process implicit.

Either create the referenced references/*.md, assets/*, and scripts/* files and move the detailed vulnerability writeups into them, or remove the Resources section pointing to nonexistent files.

DimensionReasoningScore

Conciseness

Mostly code-driven and substantive, but the ~500-line body repeats the Checks-Effects-Interactions pattern three times (sections 1, Best Practices, and Audit Preparation) and re-opens with a line duplicating the description.

3 / 5

Actionability

Provides substantial copy-paste-ready Solidity with vulnerable/secure pairs side-by-side and a Hardhat test example, but the test references an undefined deposit() and ReentrancyAttacker, and the checklist 'contract' is comments only.

4 / 5

Workflow Clarity

The skill reads as a reference catalog rather than a sequenced process; a security checklist provides some validation but there is no explicit validate->fix->retry feedback loop for auditing or batch operations.

3 / 5

Progressive Disclosure

Section structure and a signaled Resources list exist, but all detailed content is inlined into SKILL.md and the referenced references/, assets/, and scripts/ files do not actually exist in the bundle.

3 / 5

Total

13

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-targeted description that clearly states capabilities and explicit usage triggers with natural keywords. Only minor improvements in synonym coverage and concreteness of phrasing would be needed.

DimensionReasoningScore

Specificity

Lists several concrete actions ('prevent common vulnerabilities', 'implement secure Solidity patterns', 'auditing existing contracts') with only minor gaps, though 'master... best practices' leans slightly abstract.

4 / 5

Completeness

Explicitly answers both what ('Master... prevent... implement secure Solidity patterns') and when ('Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Natural terms users would say are present ('smart contracts', 'Solidity', 'auditing existing contracts', 'blockchain applications'), but a few common synonyms like 'Ethereum' or 'audit' are absent.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (Solidity/smart-contract security) with distinct triggers and minimal overlap risk with other skills.

5 / 5

Total

18

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (526 lines); consider splitting into references/ and linking

Warning

referenced_paths_exist

Referenced path issues: 8 missing

Warning

Total

14

/

16

Passed

Repository
Dicklesworthstone/pi_agent_rust
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.