CtrlK
BlogDocsLog inGet started
Tessl Logo

solidity-security

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

60

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./plugins/blockchain-web3/skills/solidity-security/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers strong, executable code examples and clean sectioning with a properly signaled one-level reference, but it is not a guided workflow and carries some redundant restatement of the description. Tightening repetition and either defining the referenced contracts or moving large examples to details.md would raise the score.

Suggestions

Remove the redundant opening line and trim the 'When to Use' list so the body does not restate the frontmatter description.

Define the helper contracts (SecureBank, ReentrancyAttacker, SecureToken, SecureContract) or link to their source so the Hardhat tests are fully runnable as written.

Move the longer code examples into references/details.md and keep only a minimal inline snippet, improving both conciseness and progressive disclosure.

DimensionReasoningScore

Conciseness

Mostly efficient with two substantial but justified executable code blocks, yet the opening line and the 'When to Use' bullet list restate the frontmatter description, adding redundancy that could be trimmed.

3 / 5

Actionability

Provides concrete, executable Hardhat test code and a Solidity CEI example that are largely copy-paste ready, but referenced contracts (SecureBank, ReentrancyAttacker, SecureToken, SecureContract) are not defined, leaving minor gaps.

4 / 5

Workflow Clarity

This is a knowledge/reference skill with no sequenced multi-step process or validation checkpoints; the 'When to Use' list gives scope but not a guided workflow, so it sits at the midpoint rather than higher.

3 / 5

Progressive Disclosure

Clear section structure with a single, well-signaled one-level-deep reference to references/details.md (a real file), though only one reference target exists and two large code blocks are inlined rather than split out.

4 / 5

Total

14

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly states both capability and trigger conditions with concrete, domain-specific language and low conflict risk. It is held back from full marks only by slightly generic 'what' phrasing and a few missing natural synonyms like .sol or Ethereum.

Suggestions

Swap 'best practices' / 'common vulnerabilities' for concrete pattern names (e.g. reentrancy guards, CEI pattern, access control) in the 'what' clause to reach comprehensive specificity.

Add natural trigger synonyms and file extensions such as '.sol', 'Ethereum', or 'DeFi' to broaden keyword coverage.

Tighten 'implementing security measures for blockchain applications' to a more distinctive phrase to further reduce overlap with general blockchain skills.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions ('prevent common vulnerabilities', 'implement secure Solidity patterns', 'writing smart contracts, auditing existing contracts'), with only minor generic phrasing like 'best practices' keeping it below a 5.

4 / 5

Completeness

Both 'what' and 'when' are explicitly answered ('Master... prevent... implement...' plus 'Use when writing smart contracts, auditing... or implementing security measures'), with the 'when' clause offering multiple concrete triggers; the 'what' is slightly less granular than the 5 anchor.

4 / 5

Trigger Term Quality

Natural terms users would say are present ('smart contracts', 'auditing existing contracts', 'blockchain applications', 'Solidity'), but common synonyms/extensions like '.sol', 'Ethereum', or 'DeFi' are missing.

4 / 5

Distinctiveness Conflict Risk

The 'smart contract security' / 'Solidity' niche has distinct, domain-specific triggers and minimal overlap risk with other skills, matching the clear-niche 5 anchor.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
wshobson/agents
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.