CtrlK
BlogDocsLog inGet started
Tessl Logo

contracts-overview

Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

61

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/contracts/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is concise and actionable with a clear playbook reference table and concrete commands, but the workflow lacks explicit validation/feedback checkpoints for a batch exploit-generation process. Adding error-recovery steps would most improve the weakest dimension.

Suggestions

Insert validation checkpoints into the workflow, e.g. after slither runs (check slither.json was created and parse errors) and after each PoC (if forge test fails, debug and retry before promoting).

Replace the "foundry_reentrancy_test etc." placeholder in step 6 with a concrete mapping of vulnerability kind to the specific Foundry test generator to call.

Note where the referenced playbook SKILL.md files live relative to the working directory so navigation is unambiguous when the paths are not local.

DimensionReasoningScore

Conciseness

Lean tables and a numbered workflow with concrete bash commands; no padding or explanation of concepts Claude already knows, so every token earns its place.

5 / 5

Actionability

Provides concrete executable commands (bash invocations) and named tools (solidity_scan_file, slither_ingest, kg_query), but step 6's "foundry_reentrancy_test etc." leaves a small gap versus fully copy-paste-ready guidance.

4 / 5

Workflow Clarity

An 8-step sequence is present, but this batch workflow (scan all files, generate and run PoCs) lacks explicit validation/feedback checkpoints (e.g. what to do if slither fails or a PoC won't compile), capping it at 3 per the rubric.

3 / 5

Progressive Disclosure

Well-signaled one-level-deep references via the playbook table of /skills/.../SKILL.md paths with clear section organization; the referenced paths are external skill files rather than local bundles to verify, keeping it just under the 5 anchor.

4 / 5

Total

16

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and well-differentiated with strong domain trigger terms, but it omits an explicit "Use when…" clause, which caps its completeness. Adding concrete trigger guidance would lift the weakest dimension.

Suggestions

Append an explicit "Use when…" clause, e.g. "Use when auditing Solidity/EVM contracts, ingesting Slither output, or generating Foundry PoCs for DeFi vulnerabilities."

Soften the abstract term "DeFi attack playbooks" into a concrete action such as "apply DeFi attack playbooks (reentrancy, oracle manipulation, flash-loan)".

Add common synonyms/file extensions users might say (e.g. ".sol", "smart contract security review") to round out trigger-term coverage.

DimensionReasoningScore

Specificity

Names four concrete capabilities ("Solidity/EVM pattern scanner", "Slither ingestion", "Foundry PoC generation", "DeFi attack playbooks"), but "playbooks" is slightly abstract, leaving a minor coverage gap versus the comprehensive 5 anchor.

4 / 5

Completeness

Clear "what" but no explicit "Use when…" trigger clause, so per the rubric guidance completeness is capped at 3.

3 / 5

Trigger Term Quality

Strong natural domain keywords (Smart contract, Solidity, EVM, Slither, Foundry, DeFi, audit) a user would say, but missing common synonyms/variations, fitting the good-but-incomplete 4 anchor.

4 / 5

Distinctiveness Conflict Risk

Highly specific web3/smart-contract audit niche with distinct triggers (Solidity, EVM, Slither, Foundry, DeFi), minimal overlap risk with other skills.

5 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.