trailofbits/skills✦ 精选0°

secure-workflow-guide

仓库创建 2026年1月15日最近提交 6 天前SkillHot 收录 20 天前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

把多种检测（如 Slither）、可视化与文档化整合成可重复的安全检查流水线

▸ 风险提示

会调用外部安全二进制并访问代码仓库，可能执行非信任代码或泄露敏感源码

这个 Skill 做什么

引导并自动执行 Trail of Bits 的五步智能合约安全开发工作流

按 Trail of Bits 的五步流程指导智能合约安全开发：会跑 Slither 扫描、检查可升级性、ERC 合规与代币集成，生成安全流程图并整理给模糊测试/形式化验证用的文档。适合每次提交、发布前或需要完整安全把关时使用。特点是把自动化检测和人工审查串联起来，产出可复现的安全证据和图示。

▸ 展开 SKILL.md 英文原文

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas.

开发编程智能合约安全流程静态分析自动化通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Secure Workflow Guide

## Purpose

Guides through Trail of Bits' secure development workflow - a 5-step process to enhance smart contract security throughout development.

**Use this**: On every check-in, before deployment, or when you want a security review

---

## The 5-Step Workflow

Covers a security workflow including:

### Step 1: Check for Known Security Issues
Run Slither with 70+ built-in detectors to find common vulnerabilities:
- Parse findings by severity
- Explain each issue with file references
- Recommend fixes
- Help triage false positives

**Goal**: Clean Slither report or documented triages

### Step 2: Check Special Features
Detect and validate applicable features:
- **

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有