guidelines-advisor
About
The guidelines-advisor skill provides automated security and best practice reviews for smart contract codebases, based on Trail of Bits' expertise. It analyzes architecture, upgradeability, implementation quality, dependencies, and testing to identify risks and generate actionable recommendations. Developers should use this skill when auditing or building secure smart contracts to get comprehensive, expert-level feedback.
Quick Install
Claude Code
Recommendednpx skills add plurigrid/asi -a claude-code/plugin add https://github.com/plurigrid/asigit clone https://github.com/plurigrid/asi.git ~/.claude/skills/guidelines-advisorCopy and paste this command in Claude Code to install this skill
GitHub Repository
Related Skills
cairo-vulnerability-scanner
OtherThis skill scans Cairo/StarkNet smart contracts for six critical security vulnerabilities like arithmetic overflow and messaging issues. Use it during smart contract audits to automatically detect common security flaws in StarkNet projects. It's particularly valuable for developers building or reviewing secure Cairo contracts.
solana-vulnerability-scanner
OtherThis skill scans Solana and Anchor programs for six critical security vulnerabilities like arbitrary CPI and improper PDA validation. Developers should use it when auditing smart contracts to automatically identify common security flaws. It provides automated security analysis to help build more secure Solana programs.
substrate-vulnerability-scanner
OtherThis skill scans Substrate/Polkadot blockchain pallets for seven critical security vulnerabilities like arithmetic overflows and bad origin checks. Use it when auditing Substrate runtimes or FRAME pallets to automatically detect common security issues. It's ideal for developers building or reviewing secure smart contracts on Polkadot.
token-integration-analyzer
OtherThis skill analyzes token implementations and integrations for security risks based on Trail of Bits' checklist. It checks ERC20/ERC721 conformity, detects unusual token patterns, and assesses contract privileges. Use it when integrating tokens or auditing token contracts to identify non-standard behaviors and vulnerabilities.