A fast, lightweight static analysis tool for detecting vulnerabilities in Solidity smart contracts using the Slither engine.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install slither-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install slither-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Slither Audit?
Slither Audit is a specialized security tool designed for Openclaw Skills to perform deep static analysis on local Solidity contracts. It leverages the industry-standard Slither analyzer to scan source code for over 100 known vulnerability patterns, providing developers with immediate feedback on the security posture of their EVM-compatible smart contracts.
This skill is optimized for local development environments, ensuring that sensitive source code never leaves the workstation. By integrating Slither into the Openclaw Skills ecosystem, developers can generate detailed security reports that categorize findings by severity, ranging from informational optimizations to critical reentrancy risks.
Slither Audit Use Cases
- Identifying critical security vulnerabilities like reentrancy and integer overflows in local Solidity files.
- Generating automated Markdown security reports for peer reviews or documentation.
- Performing pre-deployment audits of EVM smart contracts to ensure best practices.
- Integrating static analysis into local development workflows within Openclaw Skills.
How Slither Audit Works
- The skill identifies local Solidity (.sol) files or directories provided by the user.
- It executes the Slither analyzer against the target source code to identify potential security threats.
- The raw analysis data is parsed to extract specific findings, severity levels, and code locations.
- A comprehensive Markdown report is generated, summarizing the total issue count and detailing each vulnerability found.
Slither Audit Setup
To use this skill, you must first install the Slither analyzer on your system:
pip install slither-analyzer
Once installed, you can trigger an audit through Openclaw Skills using the following command structure:
# Run audit on a specific directory
python3 slither-audit.py ./contracts/
# Run audit on a specific file
python3 slither-audit.py contract.sol
Slither Audit Data Schema & Taxonomy
The skill produces a structured audit report that organizes security findings for clear readability. The output follows this taxonomy:
| Component | Description |
|---|---|
| Chain | Indicates the target environment, defaulting to local files |
| Vulnerability List | Detailed breakdown of detected issues (e.g., reentrancy-eth) |
| Severity Level | Impact classification for each finding (High, Medium, Low, Informational) |
| Finding Description | Specific details regarding where and why the vulnerability was flagged |
| Issue Count | A final tally of all security concerns identified during the scan |
Slither Audit Advanced Features
- Supports scanning of entire project directories or isolated individual contracts.
- Detects 100+ distinct smart contract vulnerability patterns out of the box.
- Operates entirely locally within Openclaw Skills, requiring no external API keys or cloud connections.
- Fast execution speed suitable for iterative development and frequent security checks.
- Lightweight design focuses on core security logic without the overhead of AI-based inference.
SKILL.md
Loading
Related Openclaw Skills
Markdown Extract
A high-performance utility designed to convert web pages into clean, developer-friendly markdown via the markdown.new API.
deBridge MCP Skill
Enable AI agents to perform secure, non-custodial cross-chain cryptocurrency swaps and asset transfers via the deBridge protocol.
Agent Security Auditor
A specialized auditing tool designed to scan ERC-8004 agents for security vulnerabilities, configuration errors, and malicious metadata.
Semver Helper
A comprehensive guide and decision tool for implementing Semantic Versioning 2.0.0 in software projects.
Token Budget Monitor
A lightweight monitoring tool to track, limit, and optimize token expenditure across automated AI workflows.
X-Research
A professional-grade research agent that searches X for real-time developer discussions, product feedback, and industry trends.
Featured*
