Skip to content
cccskills
FreePublished on GitHub

smart-contract-auditor

AI智能合约安全审计,检测重入攻击、整数溢出、权限问题、未检查返回值等常见漏洞。每次调用收费0.001 USDT。触发词:合约审计、contract audit、智能合约安全、代码审计、solidity审计。

The English summary is being prepared. Showing the original description.

See how to install

Files included (4)

  • SKILL.md2.0 KB
  • _meta.json141 B
  • .clawhub/origin.json154 B
  • scripts/contract_auditor.py2.3 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

智能合约审计

每次调用收费 0.001 USDT。收款钱包: 0x64f15739932c144b54ad12eb05a02ea64f755a53

功能

  • 漏洞检测: 重入攻击、整数溢出、权限问题
  • 代码模式分析: tx.origin使用、block.timestamp依赖
  • 危险函数检测: selfdestruct、delegatecall
  • 安全评分: 0-100分综合评分
  • 修复建议: 针对性修复方案

使用方法

# 审计合约文件
python scripts/contract_auditor.py contract.sol

# 直接传入代码
python scripts/contract_auditor.py --code "contract code here"

检测项目

高危漏洞

  • 🔴 重入攻击风险 (reentrancy)
  • 🔴 自毁函数 (selfdestruct)
  • 🔴 未检查的外部调用

中危漏洞

  • 🟡 tx.origin使用
  • 🟡 区块时间依赖
  • 🟡 未检查返回值

低危问题

  • ℹ️ 无限授权风险
  • ℹ️ 缺少事件日志

输出示例

🔍 智能合约审计
━━━━━━━━━━━━━━━━
📊 安全评分: 72/100

检测结果:
  🔴 重入攻击风险 (高)
  🟡 tx.origin使用 (中)
  ℹ️ 未检测到明显漏洞 (信息)

💡 建议使用Slither进行深度审计

✅ 已扣费 0.001 USDT

修复建议

重入攻击

// 使用ReentrancyGuard
import "@openzeppelin/contracts/security/ReentrancyGuard.sol";

contract SafeContract is ReentrancyGuard {
    function withdraw() external nonReentrant {
        // ...
    }
}

tx.origin问题

// 错误
require(tx.origin == owner);

// 正确
require(msg.sender == owner);

注意事项

  • 此工具提供基础静态分析
  • 建议结合Slither、Mythril等专业工具
  • 大额项目建议找专业审计公司

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

监控 A 股基金实时估值与盘后净值,自动判断交易日并生成提醒或分析。

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

Expert sales execution covering pipeline management, discovery, demos, negotiation, and deal closing. Use when qualifying opportunities, running MEDDIC discovery, building account plans, handling objections, structuring proposals, or forecasting pipeline.

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

Support accounting understanding from basic bookkeeping to professional practice and research.

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

Automate ActiveCampaign tasks via Rube MCP (Composio): manage contacts, tags, list subscriptions, automation enrollment, and tasks. Always search tools first for current schemas.

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

Add company/person/relationship to CRM

The English summary is being prepared. Showing the original description.

aAAaqwq/openclaw-team2Updated Jun 18, 2026

See all skills by aAAaqwq

Report a problem with this skill