360 Secure SkillHub
360 安全技能中心

Solidity LSP

该 Skill 借助 solc（solcjs）与 solhint 命令行工具，为 .sol 智能合约提供编译、静态检查与常见安全检查，并提示 gas 优化与代码智能问题；可配合 Hardhat/Foundry 使用，依赖 npm 与 Python 工具安装。

bowen31337
bowen31337
热度 69.95
最近更新 2026-04-30 11:35:56
分类：开发依赖：代码执行 / 读写文件应用场景：代码审查 / 调试排错

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add solidity-lsp
Metadata
name
solidity-lsp
description
Solidity language server providing smart contract development support including compilation, linting, security analysis, and code intelligence for .sol files. Use when working with Ethereum smart contracts, Substrate pallets, or any Solidity code that needs compilation, security checks, gas optimization, or code navigation. Essential for ClawChain pallet development.

Solidity LSP

Solidity language server integration providing comprehensive smart contract development support through solc (Solidity compiler) and solhint (linter).

Capabilities

  • Compilation: Compile Solidity smart contracts with solc
  • Linting: Static analysis with solhint for best practices and security
  • Security: Detect common vulnerabilities (reentrancy, overflow, etc.)
  • Gas optimization: Identify expensive operations
  • Code intelligence: Syntax highlighting, error detection
  • Supported extensions: .sol

Installation

Install Solidity compiler and linter:

# Solidity compiler
npm install -g solc

# Solidity linter
npm install -g solhint

Verify installation:

solcjs --version
solhint --version

Usage

Compile Solidity Contract

solcjs --bin --abi contract.sol

Compile with optimization:

solcjs --optimize --bin --abi contract.sol

Lint Contract

Run solhint on a file:

solhint contracts/MyContract.sol

Run on entire project:

solhint 'contracts/**/*.sol'

Security Analysis

solhint includes security rules by default. For advanced security analysis, consider:

# Install slither (requires Python)
pip3 install slither-analyzer

# Run security analysis
slither contracts/

Configuration

solhint Configuration

Create .solhint.json in project root:

{
  "extends": "solhint:recommended",
  "rules": {
    "compiler-version": ["error", "^0.8.0"],
    "func-visibility": ["warn", {"ignoreConstructors": true}],
    "max-line-length": ["warn", 120],
    "not-rely-on-time": "warn",
    "avoid-low-level-calls": "warn",
    "no-inline-assembly": "warn"
  }
}

Hardhat/Foundry Integration

For full development environments, see references/frameworks.md.

Integration Pattern

When developing smart contracts:

  1. Write: Edit Solidity code
  2. Lint: Run solhint to catch issues early
  3. Compile: Use solcjs to verify compilation
  4. Analyze: Run security tools before deployment
  5. Test: Write comprehensive unit tests

Common Issues

  • Compiler version mismatch: Specify pragma version in contract
  • Gas optimization: Use view/pure where possible
  • Security: Never use tx.origin for authentication
  • Best practices: Follow Checks-Effects-Interactions pattern

More Information