Building Secure Contracts

by @trailofbits · plugin · 11 skills

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

Install the whole plugin (CLI)

npx skillmds add trailofbits/guidelines-advisor
npx skillmds add trailofbits/audit-prep-assistant
npx skillmds add trailofbits/secure-workflow-guide
npx skillmds add trailofbits/code-maturity-assessor
npx skillmds add trailofbits/ton-vulnerability-scanner
npx skillmds add trailofbits/token-integration-analyzer
npx skillmds add trailofbits/cairo-vulnerability-scanner
npx skillmds add trailofbits/cosmos-vulnerability-scanner
npx skillmds add trailofbits/solana-vulnerability-scanner
npx skillmds add trailofbits/algorand-vulnerability-scanner
npx skillmds add trailofbits/substrate-vulnerability-scanner

⬇ Download

Skills in this plugin

▌
guidelines-advisor · trailofbits bundle
Analyzes smart contract codebases against Trail of Bits' secure development guidelines, generating documentation, reviewing architecture and upgradeability patterns, assessing implementation quality, identifying pitfalls, and providing prioritized recommendations.

6k
repo stars
▌
audit-prep-assistant · trailofbits bundle
Prepares codebases for security review using Trail of Bits' checklist by setting review goals, running static analysis, increasing test coverage, removing dead code, and generating documentation.

6k
repo stars
▌
secure-workflow-guide · trailofbits bundle
Guides through a 5-step secure development workflow for smart contracts, including automated scanning with Slither, special feature validation, visual security diagrams, security property documentation, and manual review.

6k
repo stars
▌
code-maturity-assessor · trailofbits bundle
Assesses codebase maturity using Trail of Bits' 9-category framework, producing a professional scorecard with evidence-based ratings and actionable recommendations.

6k
repo stars
▌
ton-vulnerability-scanner · trailofbits bundle
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.

6k
repo stars
▌
token-integration-analyzer · trailofbits bundle
Analyzes token implementations and integrations for ERC20/ERC721 conformity, weird token patterns, contract composition, owner privileges, and on-chain scarcity.

6k
repo stars
▌
cairo-vulnerability-scanner · trailofbits bundle
Scans Cairo/StarkNet smart contracts for 6 critical vulnerability patterns including arithmetic overflow, L1-L2 messaging issues, and signature replay. Use when auditing StarkNet projects.

6k
repo stars
▌
cosmos-vulnerability-scanner · trailofbits bundle
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities such as chain halts, fund loss, and state divergence.

6k
repo stars
▌
solana-vulnerability-scanner · trailofbits bundle
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.

6k
repo stars
▌
algorand-vulnerability-scanner · trailofbits bundle
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.

6k
repo stars
▌
substrate-vulnerability-scanner · trailofbits bundle
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

6k
repo stars