slither-audit

What This Skill Does

The slither-audit skill integrates the industry-standard Slither static analysis framework directly into your OpenClaw environment. It allows you to perform automated, deep-level security analysis on local Solidity smart contracts. By scanning your source code, the skill identifies potential vulnerabilities, coding errors, and gas optimization opportunities. It acts as a primary gatekeeper in your development lifecycle, surfacing high-risk issues like reentrancy, improper access control, and integer overflows before you ever consider deploying to a mainnet or testnet. The tool is designed for speed and precision, acting as a lightweight yet robust deterministic scanner rather than an AI-generative model.

Installation

To integrate this security utility into your local environment, use the OpenClaw management CLI. Ensure you have the slither-analyzer Python package installed in your environment, as it serves as the underlying engine. Run the following command:

clawhub install openclaw/skills/skills/aviclaw/slither-audit

Ensure that you have solc (the Solidity compiler) installed and configured on your machine, as Slither requires it to parse your contracts correctly.

Use Cases

This skill is ideal for:

• Pre-deployment security checks for local smart contract development.
• Auditing existing projects for compliance with security best practices.
• Identifying low-hanging fruit in legacy codebases before manual expert review.
• Automating security regression testing within a CI/CD pipeline integrated with OpenClaw.

Example Prompts

1. "Run a security audit on the ./src folder and output a summary of any high-severity reentrancy issues."
2. "Analyze the contract TokenVault.sol and generate a markdown report detailing all detected vulnerabilities."
3. "Can you perform a quick Slither scan on my current project directory and highlight any access control flaws?"

Tips & Limitations

• Local Files Only: This tool cannot interact with Etherscan or other block explorers to fetch verified contract code directly. Please ensure your files are saved locally.
• No AI Analysis: Slither is a static analysis framework. It does not 'reason' about business logic; it searches for known vulnerability patterns. If you need semantic logic analysis, pair this with evmbench.
• Prerequisites: Your code must compile successfully; the tool cannot audit broken or syntactically incorrect Solidity code.
• Versioning: Always verify your solc version matches your contract's pragma requirements to avoid analysis failures.