CtrlK
BlogDocsLog inGet started
Tessl Logo

contracts-overview

Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

68

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

87%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, actionable catalog-and-workflow body with excellent token efficiency and clear navigation to sub-skills, held back only by the absence of an explicit validation/retry feedback loop in the batch audit workflow.

Suggestions

Add an explicit validation/retry loop around the batch PoC step, e.g. 'If a PoC fails to reproduce, refine the exploit vector and re-run forge test; only promote reproducible PoCs.'

Expand the terse tool calls (step 2 'solidity_scan_file on each file' and step 6 'foundry_reentrancy_test etc.') with their argument signatures so every step is fully copy-paste ready.

DimensionReasoningScore

Conciseness

The body is lean — a catalog table, a numbered workflow of concrete commands, and a severity table — with no explanation of concepts Claude already knows (what Solidity/Slither/reentrancy are); not level 2 because there is no unnecessary padding to tighten.

3 / 3

Actionability

Provides copy-paste-ready bash commands ('find /workspace/src -name "*.sol"', 'slither . --json slither.json', 'forge test -vvv --match-contract Test_') and named tool calls with args ('slither_ingest("/workspace/slither.json")', 'kg_query(kind="vulnerability", min_severity="high")'); not level 2 because the guidance is executable rather than pseudocode, despite minor terseness in step 2 and the 'etc.' in step 6.

3 / 3

Workflow Clarity

The 8-step sequence is clear and the forge-test pass gate (step 7→8) is an implicit checkpoint, but this batch operation (scanning all files, generating PoCs for every high) lacks an explicit validate→fix→retry feedback loop, capping it at 2 per the batch-operations guideline; not level 3 because there is no explicit error-recovery loop, and not level 1 because the sequence is present and ordered.

2 / 3

Progressive Disclosure

The body is a well-organized overview (Playbooks, Workflow, Default severity floor) with one-level-deep, clearly signaled references to sub-skills via a 'Use for' table; no bundle files exist, and the under-50-line body is appropriately split, so it earns 3 per the simple-skills note; not level 2 because references are clearly signaled rather than vague.

3 / 3

Total

11

/

12

Passed

Description

82%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-scoped description with strong natural trigger terms and clear distinctiveness, weakened only by the absence of an explicit 'Use when...' clause that would fully answer when to invoke the skill.

Suggestions

Add an explicit trigger clause, e.g. 'Use when auditing Solidity/EVM smart contracts, running Slither, or generating Foundry PoCs for DeFi vulnerabilities.'

Consider adding plain-language variants ('smart contract security review', 'blockchain bug hunt') alongside the tool names to broaden natural trigger coverage.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Solidity/EVM pattern scanner', 'Slither ingestion', 'Foundry PoC generation', 'DeFi attack playbooks' — matching the 'lists multiple specific concrete actions' anchor; not level 2 because the action set is comprehensive rather than partial.

3 / 3

Completeness

Clearly states what the skill does but has no explicit 'Use when...' trigger clause, so per the judging guidelines completeness is capped at 2; not level 3 because 'when' is only implied by 'audit lane', and not level 1 because 'what' is explicit and strong.

2 / 3

Trigger Term Quality

Includes natural domain keywords a user would say — 'Smart contract', 'Solidity', 'EVM', 'Slither', 'Foundry', 'DeFi', 'audit' — giving good coverage; not level 2 because common variations are well represented for this audience.

3 / 3

Distinctiveness Conflict Risk

The Solidity/EVM/Slither/Foundry/DeFi audit niche is distinct and unlikely to trigger for unrelated skills; not level 2 because the specialization is sharp rather than merely 'somewhat specific'.

3 / 3

Total

11

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.