Are the security recommendations actionable?

Absolutely. All findings include file references, line numbers, and are prioritized into Critical, High, Medium, and Low categories for easy remediation.

Does it require external security tools like Slither?

It can leverage tools like Slither for deep analysis and diagramming if they are available in your environment, but it can also perform comprehensive manual-style reviews without them.

How does it help with contract upgradeability?

It specifically checks for storage layout consistency, initialization patterns, and function shadowing risks in delegatecall and proxy implementations.

What programming languages does this skill support?

While it specializes in Solidity, the skill is platform-agnostic and adapts its guidance for Rust, Cairo, and other smart contract languages based on the project context.

Can it generate documentation for my project?

Yes, it creates plain-English system descriptions, identifies documentation gaps, and provides NatSpec recommendations to improve code maintainability.

Trail of Bits Smart Contract Guidelines Advisor

Name: Trail of Bits Smart Contract Guidelines Advisor
Author: trailofbits

bytrailofbits

•

2,992

•

Security & Testing

Analyzes smart contract codebases to provide security-focused architectural reviews and development guidance based on Trail of Bits' best practices.

The Guidelines Advisor is a comprehensive security and development consultant for smart contract projects. Leveraging the 'Building Secure Contracts' framework, it systematically evaluates codebases across eleven critical areas including upgradeability patterns, dependency risks, and testing coverage. It helps developers build a robust foundation by generating plain-English documentation, visualizing complex architectures, and providing a prioritized roadmap of actionable improvements. Whether you are preparing for a professional audit or establishing a secure development lifecycle, this skill ensures your contracts meet industry-leading security standards.

Key Features

01Identifies common smart contract pitfalls like reentrancy and access control issues

022,992 GitHub stars

03Analyzes upgradeability patterns and delegatecall proxy security risks

04Evaluates test suite quality including coverage, fuzzing, and formal verification

05Generates system specifications and architectural diagrams using Slither printers

06Provides prioritized recommendations from critical security fixes to quality improvements

Use Cases

01Reviewing complex upgradeable proxy architectures for potential storage collisions

02Establishing documentation and testing standards for new decentralized protocols

03Preparing a smart contract codebase for a professional third-party security audit

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trailofbits/skills guidelines-advisor

For use in Claude.ai and ChatGPT

Download Skill