Fizz Convert
pashov/skills
Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.
Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.
Install Smart Contract Audit
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-audit --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/smart-contract-audit .claude/skills/smart-contract-audit && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .claude/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-auditType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-audit --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/smart-contract-audit .agents/skills/smart-contract-audit && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .agents/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-audit --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/smart-contract-audit .cursor/skills/smart-contract-audit && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .cursor/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/greatpie/smart-contract-audit-skill.git --path skills/smart-contract-audit--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-audit --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/smart-contract-audit .gemini/skills/smart-contract-audit && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .gemini/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-auditInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/smart-contract-audit .github/skills/smart-contract-audit && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .github/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install greatpie/smart-contract-audit-skill smart-contract-audit --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/greatpie/smart-contract-audit-skill.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/smart-contract-audit .opencode/skills/smart-contract-audit && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "smart-contract-audit" agent skill from https://github.com/greatpie/smart-contract-audit-skill/tree/main/skills/smart-contract-audit into .opencode/skills/smart-contract-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "smart-contract-audit", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
smart-contract-audit- GitHub stars
- 101
- Token cost
- ~1.1k tokens
- SKILL.md length
- 366 words
- Files
- 14 (incl. scripts, references)
- Skills in repo
- 1
- Repo updated
- First seen
- Licence
- None found
At a glance
Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.
- Asked to audit a smart contract repo from a URL
- SKILL.md covers Overview, Quick Start, Script Behavior and Audit Standard, plus 2 more sections
- Runs Shell scripts from its folder; calls bash
- Auto-prepare the environment
What it does
Smart Contract Audit is an agent skill from greatpie/smart-contract-audit-skill. Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology. Use when asked to audit a smart contract repo from a URL or local path, auto-prepare the environment, find high-severity loss-of-funds vulnerabilities, validate exploitability, propose safe fixes, and deliver a structured report with exact code references.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 16 other files, including scripts and reference files (for example `references/benchmark-reality-checklist.md`, `references/evmbench-core.md` and `references/report-template.md`).
It sits in Backend & APIs, covering Smart contracts and Smart contract auditing. It works with Solidity.
When your agent uses it
- Asked to audit a smart contract repo from a URL
- Auto-prepare the environment
- Find high-severity loss-of-funds vulnerabilities
- Validate exploitability
Example prompts
- “/smart-contract-audit”
Requirements
- A Bash shell
What it can do on your machine
Read from SKILL.md and the folder at commit 31b8142. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 9 files in scripts/ (Shell), which the agent can run.
Shell commands in SKILL.md call:
bash
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Smart Contract Audit loads about 1.1k tokens when it runs, and up to ~2.9k if it reads all its reference files. Until then it costs about 101 tokens; SKILL.md has 366 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 366 words (~1,074 tokens).
“Run a complete security audit flow for a target EVM repository, optimized for high-impact vulnerabilities that can directly or indirectly cause loss of user or protocol assets.”
- name
- smart-contract-audit
Files
SKILL.md and 13 other files (scripts, references) in skills/smart-contract-audit of greatpie/smart-contract-audit-skill.
- SKILL.md
- references/benchmark-reality-checklist.md
- references/evmbench-core.md
- references/report-template.md
- references/script-usage.md
- scripts/audit.sh
- scripts/bootstrap.sh
- scripts/generate_exploit_scaffold.sh
- scripts/lib.sh
- scripts/run_detect.sh
- scripts/run_exploit.sh
- scripts/run_patch.sh
- scripts/templates/foundry-exploit-template.sh
- scripts/templates/hardhat-exploit-template.sh
Open the folder on GitHubat commit 31b8142
Compare with similar skills
Smart Contract Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Smart Contract Audit this skillgreatpie/smart-contract-audit-skill | 101 | — | ~1.1k | Automated safety check: Pass | None | |
| Fizz Convertpashov/skills | 1.2k | 2 repos | ~3.7k | Automated safety check: Pass | MIT | |
| Solidity AuditorGabson0x/bountyforge | 442 | — | ~3.7k | Automated safety check: Pass | None | |
| Solidity Auditorpashov/skills | 1.2k | — | ~9.9k | Automated safety check: Pass | MIT | |
| Solidity Securitywshobson/agents | 40k | 12 repos | ~892 | Automated safety check: Pass | MIT | |
| Input Arithmetic Safetyquillai-network/quillshield_skills | 130 | — | ~3.1k | Automated safety check: Pass | MIT |
Similar skills
Solidity Auditor
Gabson0x/bountyforge
Security audit of Solidity code while you develop. An agent skill from Gabson0x/bountyforge.
Solidity Auditor
pashov/skills
Security audit of Solidity code while you develop. An agent skill from pashov/skills.
Solidity Security
wshobson/agents
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.
Input Arithmetic Safety
quillai-network/quillshield_skills
Detects input validation failures and arithmetic vulnerabilities in smart contracts.
Solidity Vulnerability Scanner
alt-research2/SolidityGuard
Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.
Related
Works with
Categories
Questions about Smart Contract Audit
What does Smart Contract Audit do?
Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology. Smart Contract Audit is an agent skill from greatpie/smart-contract-audit-skill. Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.
When should I use Smart Contract Audit?
Smart Contract Audit fits situations like: asked to audit a smart contract repo from a URL; auto-prepare the environment; find high-severity loss-of-funds vulnerabilities; validate exploitability.
How do I install Smart Contract Audit in Claude Code?
Run `npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a claude-code`. Or copy the skill folder (skills/smart-contract-audit in greatpie/smart-contract-audit-skill) into .claude/skills/smart-contract-audit in your project. Claude Code loads it when a task matches its description.
How do I install Smart Contract Audit in Codex?
Run `npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a codex`. Or copy the skill folder (skills/smart-contract-audit in greatpie/smart-contract-audit-skill) into .agents/skills/smart-contract-audit in your project. Codex loads it when a task matches its description.
Can I use Smart Contract Audit in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add greatpie/smart-contract-audit-skill --skill smart-contract-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/smart-contract-audit, .gemini/skills/smart-contract-audit, .github/skills/smart-contract-audit and .opencode/skills/smart-contract-audit in your project.
What does Smart Contract Audit need to run?
Going by SKILL.md and its folder, Smart Contract Audit needs a shell for the scripts in its folder and the command-line tools its instructions call (bash). Our summary lists: A Bash shell.
Does Smart Contract Audit access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Smart Contract Audit safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Smart Contract Audit use?
No licence was found for Smart Contract Audit or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Smart Contract Audit use?
About 1.1k tokens (SKILL.md is roughly 4.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.8k tokens, read only when the agent opens those files.
What are the alternatives to Smart Contract Audit?
Skills that share tags, products or a category with Smart Contract Audit: Fizz Convert (pashov/skills, 1.2k stars), Solidity Auditor (Gabson0x/bountyforge, 442 stars), Solidity Auditor (pashov/skills, 1.2k stars) and Solidity Security (wshobson/agents, 40k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Smart Contract Audit?
greatpie (a GitHub user) maintains it in greatpie/smart-contract-audit-skill, which has 101 GitHub stars. The repository was last updated on February 21, 2026.
Source: greatpie/smart-contract-audit-skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.