solidity-audit

Usage: This skill is for security audits and code reviews. It is NOT auto-invoked — call /solidity-audit when reviewing contracts for vulnerabilities.

| Same-function | Attacker re-enters the same function via fallback/receive | All external calls after state updates (CEI pattern)? | | Cross-function | Attacker re-enters a different function sharing state | All functions touching shared state protected by nonReentrant? |

| Cross-contract | Attacker re-enters through a different contract that reads stale state | External contracts cannot read intermediate state? | | Read-only | View function returns stale data during mid-execution state | No critical view functions used as oracle during state transitions? |

セキュリティ監査とコードレビューのチェックリスト。実際のエクスプロイト事例 (2021 ～ 2026 年) と EVMbench Code4rena パターンで 30 以上の脆弱性タイプをカバーします。セキュリティ監査、コードレビュー、または導入前のセキュリティ評価を実施するときに使用します。 ソース: 0xlayerghost/solidity-agent-kit。