A comprehensive CLI security auditor for Solidity smart contracts designed to detect vulnerabilities and optimize gas efficiency.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install solaudit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install solaudit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Solaudit?
Solaudit is a high-performance security scanner specifically engineered for Solidity developers. As a key utility within the ecosystem of Openclaw Skills, it allows developers to proactively identify and fix security flaws before deploying code to the blockchain. The tool scans for over 50 different vulnerability patterns, ranging from critical reentrancy attacks to low-priority code style issues, ensuring a robust security posture for decentralized applications.
Beyond simple bug detection, Solaudit provides a developer-friendly interface that fits into modern devops workflows. It supports multiple output formats such as JSON and Markdown, making it easy to generate audit reports or pipe data into other automated tools. By focusing on both security and gas optimization, it serves as a dual-purpose tool for creating safe and cost-effective smart contracts.
Solaudit Use Cases
- Performing deep recursive security audits on entire smart contract repositories before mainnet deployment.
- Integrating automated security gates into CI/CD pipelines to prevent code with critical vulnerabilities from being merged.
- Identifying gas-intensive code segments to optimize transaction costs for end-users.
- Generating professional Markdown security reports for project stakeholders and community transparency.
- Rapidly checking specific contracts for high-severity issues like unprotected self-destruct or delegatecall injections.
How Solaudit Works
- The user installs the Solaudit CLI tool globally to enable system-wide access to the scanning engine.
- Developers execute the audit command pointing to specific .sol files or contract directories.
- The engine parses the Solidity code and matches it against a library of 50+ known vulnerability patterns.
- Results are categorized by severity (Critical, High, Medium, Low) and displayed in the terminal or exported to a file.
- Developers use the gas analysis feature to further refine the contract's efficiency based on opcode usage.
Solaudit Setup
To integrate this tool into your Openclaw Skills workflow, install the CLI via npm:
npm install -g solaudit-cli
Once installed, you can verify the setup by listing the supported vulnerability patterns:
solaudit patterns
Solaudit Data Schema & Taxonomy
Solaudit organizes scan data into structured formats to facilitate easy review and automation. The following table describes the output types available for Openclaw Skills users:
| Output Format | Purpose | Description |
|---|---|---|
| Table | Visual Review | The default CLI output showing severity, file path, and issue description. |
| JSON | Automation | Machine-readable data structure for integration with external dashboards or scripts. |
| Markdown | Documentation | A formatted report file (e.g., AUDIT.md) ready for GitHub or documentation sites. |
Findings are tagged with metadata including severity level, category (e.g., Reentrancy, Access Control), and line numbers.
Solaudit Advanced Features
- Multi-level severity filtering to focus strictly on critical and high-risk security threats.
- Recursive directory scanning to ensure comprehensive coverage of complex project structures.
- Dedicated gas optimization analysis to identify specific code patterns that waste ETH.
- CI/CD ready exit codes that allow for automated build failures when security thresholds are not met.
- Category-specific pattern listing to help developers learn about and hunt for specific types of attacks.
SKILL.md
Loading
Related Openclaw Skills
Socket Generator
A specialized CLI tool for generating structured Socket.io server and client handlers from natural language descriptions.
Social Generator
A developer-centric tool that automatically adapts your technical content into platform-specific social media posts.
social-gen
A CLI tool that automatically converts technical markdown content into platform-specific social media posts for Twitter, LinkedIn, and Reddit.
Snippet Generator
A powerful AI tool that analyzes your codebase to automatically generate VS Code snippet definitions for repetitive patterns.
SQL Injection Scanner
An automated security scanner that identifies SQL injection vulnerabilities and provides parameterized query fixes for your backend code.
SQL Writer
Transform plain English descriptions into production-ready SQL queries for multiple database dialects without memorizing syntax.