Agent skill

Storage Analyzer

by alt-research2 in alt-research2/SolidityGuard

Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts.

Custom licenceAuto-check: notesBackend & APIs

Install Storage Analyzer

skills CLI
$ npx skills add alt-research2/SolidityGuard --skill storage-analyzer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install alt-research2/SolidityGuard storage-analyzer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/alt-research2/SolidityGuard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/solidity-guard/skills/storage-analyzer .claude/skills/storage-analyzer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
storage-analyzer
GitHub stars
104
Token cost
~1.3k tokens
SKILL.md length
231 words
Files
1
Skills in repo
7
Repo updated
First seen
Licence
Custom licence

At a glance

Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts.

  • Works in 5 steps: Purpose → Vulnerability Patterns → Proxy Pattern Analysis → …
  • Auditing proxy/upgradeable contracts
  • SKILL.md covers 1. Purpose, 2. Vulnerability Patterns, 3. Proxy Pattern Analysis and 4. Secure Patterns, plus 1 more section
  • Calls rg

What it does

Storage Analyzer is an agent skill from alt-research2/SolidityGuard. Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts. Detects storage collisions, uninitialized pointers, and upgrade risks. Use when auditing proxy/upgradeable contracts.

Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering Smart contracts. It works with Solidity. The repository describes itself as: Solidity/EVM smart contract security auditor — 104 vulnerability patterns, 8 tools, 100% CTF + EVMBench benchmark (120/120).

When your agent uses it

  • Auditing proxy/upgradeable contracts
  • Tasks that involve Smart contracts

Example prompts

  • “Use the storage-analyzer skill to analyz storage layout, proxy patterns, and state variable security in Solidity contracts”
  • “/storage-analyzer”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Glob, Bash

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Purpose
  2. Vulnerability Patterns
  3. Proxy Pattern Analysis
  4. Secure Patterns
  5. Quick Checklist

What it can do on your machine

Read from SKILL.md and the folder at commit 35645e8. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • rg

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Storage Analyzer loads about 1.3k tokens when it runs. Until then it costs about 57 tokens; SKILL.md has 231 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~57
When it runs · the whole SKILL.md, loaded when a task matches
~1.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Grep, Glob, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 231 words (~1,314 tokens).

“Detect storage-related vulnerabilities in Solidity contracts, especially proxy/upgradeable patterns. Storage issues are among the most severe and hardest to detect.”

— opening of SKILL.md by alt-research2, Custom licence
name
storage-analyzer
allowed-tools
Read, Grep, Glob, Bash

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .claude/skills/solidity-guard/skills/storage-analyzer of alt-research2/SolidityGuard.

Open the folder on GitHubat commit 35645e8

Compare with similar skills

Storage Analyzer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Storage Analyzer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Storage Analyzer this skillalt-research2/SolidityGuard104—~1.3kAutomated safety check: NotesCustom licence
Fizz Convertpashov/skills1.2k2 repos~3.7kAutomated safety check: PassMIT
Feynman Auditor0xiehnnkta/nemesis-auditor2431 repos~11kAutomated safety check: PassMIT
Smart Contract Auditgreatpie/smart-contract-audit-skill101—~1.1kAutomated safety check: PassNone
RadarAuditware/radar154—~2.1kAutomated safety check: PassGPL-3.0
Solidity AuditorGabson0x/bountyforge443—~3.7kAutomated safety check: PassNone

Similar skills

  • Fizz Convert

    pashov/skills

    Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.

    1.2k GitHub starsUsed in 2 repos~3.7k tokens
    Backend & APIsAuto-check passed
  • Feynman Auditor

    0xiehnnkta/nemesis-auditor

    Deep business logic bug finder using the Feynman technique. An agent skill from 0xiehnnkta/nemesis-auditor.

    243 GitHub starsUsed in 1 repo~11k tokens
    Backend & APIsAuto-check passed
  • Smart Contract Audit

    greatpie/smart-contract-audit-skill

    Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.

    101 GitHub stars~1.1k tokensUpdated 7 mo ago
    Backend & APIsAuto-check passed
  • Radar

    Auditware/radar

    Use radar for smart contract security analysis, AST generation, and detection template development.

    154 GitHub stars~2.1k tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed
  • Solidity Auditor

    Gabson0x/bountyforge

    Security audit of Solidity code while you develop. An agent skill from Gabson0x/bountyforge.

    443 GitHub stars~3.7k tokensUpdated 22 days ago
    Backend & APIsAuto-check passed
  • Solidity Auditor

    pashov/skills

    Security audit of Solidity code while you develop. An agent skill from pashov/skills.

    1.2k GitHub starsUsed in 1 repo~9.9k tokens
    Backend & APIsAuto-check passed

More from alt-research2/SolidityGuard

  • Entry Point Analyzer

    alt-research2/SolidityGuard

    Analyzes Solidity contract entry points to map attack surface.

    104 GitHub stars~959 tokensUpdated 3 mo ago
    Auto-check passed
  • Fuzz Generator

    alt-research2/SolidityGuard

    Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

    104 GitHub stars~763 tokensUpdated 3 mo ago
    Auto-check: notes
  • Reentrancy Auditor

    alt-research2/SolidityGuard

    Deep reentrancy vulnerability analysis for Solidity contracts.

    104 GitHub stars~1.8k tokensUpdated 3 mo ago
    Auto-check passed
  • Report Generator

    alt-research2/SolidityGuard

    Generates professional security audit reports from findings.

    104 GitHub stars~1k tokensUpdated 3 mo ago
    Auto-check passed
  • Solidity Vulnerability Scanner

    alt-research2/SolidityGuard

    Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.

    104 GitHub stars~1.6k tokensUpdated 3 mo ago
    Auto-check: notes
  • Spec Compliance

    alt-research2/SolidityGuard

    Validates Solidity implementation against specification documents.

    104 GitHub stars~503 tokensUpdated 3 mo ago
    Auto-check passed

Works with

Categories

Questions about Storage Analyzer

What does Storage Analyzer do?

Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts. Storage Analyzer is an agent skill from alt-research2/SolidityGuard. Analyzes storage layout, proxy patterns, and state variable security in Solidity contracts.

When should I use Storage Analyzer?

Storage Analyzer fits situations like: auditing proxy/upgradeable contracts; tasks that involve Smart contracts.

How do I install Storage Analyzer in Claude Code?

Run `npx skills add alt-research2/SolidityGuard --skill storage-analyzer -a claude-code`. Or copy the skill folder (.claude/skills/solidity-guard/skills/storage-analyzer in alt-research2/SolidityGuard) into .claude/skills/storage-analyzer in your project. Claude Code loads it when a task matches its description.

How do I install Storage Analyzer in Codex?

Run `npx skills add alt-research2/SolidityGuard --skill storage-analyzer -a codex`. Or copy the skill folder (.claude/skills/solidity-guard/skills/storage-analyzer in alt-research2/SolidityGuard) into .agents/skills/storage-analyzer in your project. Codex loads it when a task matches its description.

Can I use Storage Analyzer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add alt-research2/SolidityGuard --skill storage-analyzer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/storage-analyzer, .gemini/skills/storage-analyzer, .github/skills/storage-analyzer and .opencode/skills/storage-analyzer in your project.

What does Storage Analyzer need to run?

Going by SKILL.md and its folder, Storage Analyzer needs the command-line tools its instructions call (rg). Its frontmatter pre-approves these tools: Read, Grep, Glob, Bash.

Does Storage Analyzer access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Storage Analyzer safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Storage Analyzer use?

Storage Analyzer has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Storage Analyzer use?

About 1.3k tokens (SKILL.md is roughly 5.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Storage Analyzer?

Skills that share tags, products or a category with Storage Analyzer: Fizz Convert (pashov/skills, 1.2k stars), Feynman Auditor (0xiehnnkta/nemesis-auditor, 243 stars), Smart Contract Audit (greatpie/smart-contract-audit-skill, 101 stars) and Radar (Auditware/radar, 154 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Storage Analyzer?

alt-research2 (a GitHub organization) maintains it in alt-research2/SolidityGuard, which has 104 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on June 12, 2026.

Source: alt-research2/SolidityGuard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.