# Cairo Security Recommendations

> Summarize Starknet smart contract security recommendations and common Cairo pitfalls; use when a request involves best practices, safety checks, or audit guidance.

- Skill: `teddyjfpender/cairo-security-recommendations` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add teddyjfpender/cairo-security-recommendations`
- Raw SKILL.md: https://api.skillmd.com/api/skills/teddyjfpender/cairo-security-recommendations/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: teddyjfpender (https://skillmd.com/u/teddyjfpender)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/teddyjfpender/cairo-security-recommendations

---


# Cairo Security Recommendations

## Overview
Provide best practice guidance for safe Starknet contract development.

## Quick Use
- Read `references/security-recommendations.md` before answering.
- Prioritize access control, input validation, and event logging.
- Call out Cairo-specific pitfalls like operator precedence and underflows.

## Response Checklist
- Require access control on privileged actions and upgrades.
- Validate external inputs, especially L1 handler senders.
- Avoid unbounded loops and large storage writes.
- Emit events for sensitive state changes.

## Example Requests
- "What are common security pitfalls in Cairo contracts?"
- "What should I validate in an L1 handler?"
- "What are general best practices for Starknet contracts?"