360 Secure SkillHub
360 安全技能中心

Slither Audit

该 Skill 通过 Python 脚本调用 Slither 对本地 .sol 文件或目录做静态分析,解析检测结果并输出 Markdown 审计报告,列出漏洞类型与严重级别。仅处理本地文件,不联网抓取合约,不含 AI 分析,也不需要 API 密钥。

aviclaw
aviclaw
热度 77.05
最近更新 2026-05-17 12:23:31
分类:安全依赖:代码执行 / 读写文件应用场景:代码审查 / 报告撰写 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add slither-audit
Metadata
name
slither-audit
description
Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts.
env
{"required":[],"optional":[]}

Slither Audit

Run Slither static analysis on local Solidity contracts.

What It Does

  • Runs Slither static analysis on local .sol files
  • Parses output for vulnerabilities
  • Generates Markdown report with findings and severity

What It Does NOT Do

  • ❌ Fetch contracts from block explorers (use local files)
  • ❌ AI-powered analysis (see evmbench for that)
  • ❌ Require API keys

Quick Start

# Install dependencies
pip install slither-analyzer

# Run audit
python3 slither-audit.py /path/to/contracts/

Usage

python3 slither-audit.py ./contracts/
python3 slither-audit.py contract.sol

Output Example

# Audit Report: Vulnerable.sol
**Chain:** local

## Vulnerabilities Found
- reentrancy-eth (High)
  Reentrancy in Bank.withdraw()...

Found 3 issues

What Slither Detects

  • Reentrancy
  • Access control
  • Integer overflow
  • Unchecked external calls
  • 100+ detectors

See: https://github.com/crytic/slither

Limitations

  • Local files only
  • No AI analysis (see evmbench)
  • Requires valid Solidity code