# Claude Tob Review > Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invariant suggestions. Use when this capability is needed. - Skill: `tomevault-io/claude-tob-review` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/claude-tob-review` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/claude-tob-review/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/claude-tob-review --- # Trail of Bits Security Review Skill Use this skill for deep Solidity smart contract security analysis using Trail of Bits methodologies. ## When to Use - Reviewing new or modified Solidity contracts - Before deploying contract upgrades - Security audit preparation - Finding vulnerability variants ## Instructions Read and apply the ToB security guidelines from `.github/prompts/tob-security-skills.md` to analyze the Solidity changes. Provide findings with severity ratings and invariant recommendations for testing. ### For PR Reviews When reviewing a PR, deliver feedback as a **single consolidated GitHub review** using `/inline-pr-comments`. Each run produces a separate review. The skill fetches prior reviews/comments for context — avoid duplicating previously raised issues. --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/hyperlane-xyz) — claim your Tome and manage your conversions.