360 Secure SkillHub
360 安全技能中心

Slither Audit

核心功能:基于Slither工具对本地Solidity合约做静态安全分析,可检测重入、权限控制、整数溢出等100+类漏洞,生成含严重等级的Markdown报告。典型使用场景:开发者对本地EVM智能合约做前置安全排查。输入为本地.sol文件或合约目录,输出结构化审计报告,无需API密钥,仅支持本地文件且依赖有效Solidity代码。

aviclaw
aviclaw
热度 77.04
最近更新 2026-05-17 12:23:31
分类:安全依赖:代码执行 / 读写文件应用场景:代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add slither-audit
Metadata
name
slither-audit
description
Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts.
env
{"required":[],"optional":[]}

Slither Audit

Run Slither static analysis on local Solidity contracts.

What It Does

  • Runs Slither static analysis on local .sol files
  • Parses output for vulnerabilities
  • Generates Markdown report with findings and severity

What It Does NOT Do

  • ❌ Fetch contracts from block explorers (use local files)
  • ❌ AI-powered analysis (see evmbench for that)
  • ❌ Require API keys

Quick Start

# Install dependencies
pip install slither-analyzer

# Run audit
python3 slither-audit.py /path/to/contracts/

Usage

python3 slither-audit.py ./contracts/
python3 slither-audit.py contract.sol

Output Example

# Audit Report: Vulnerable.sol
**Chain:** local

## Vulnerabilities Found
- reentrancy-eth (High)
  Reentrancy in Bank.withdraw()...

Found 3 issues

What Slither Detects

  • Reentrancy
  • Access control
  • Integer overflow
  • Unchecked external calls
  • 100+ detectors

See: https://github.com/crytic/slither

Limitations

  • Local files only
  • No AI analysis (see evmbench)
  • Requires valid Solidity code