SkillsAdd

near/agent-skills

near-contract-audit

Comprehensive security audit skill for NEAR Protocol smart contracts written in Rust.

First seen Feb 16, 2026

Installation

$ npx skills add near/agent-skills --skill near-contract-audit
View on skills.sh ↗ GitHub repository ↗

Summary

  • Comprehensive security audit skill for NEAR Protocol smart contracts written in Rust.
  • Use when auditing NEAR contracts, reviewing security vulnerabilities, or analyzing contract code for issues like reentrancy, unhandled promises, unsafe math, access control flaws, and callback security.

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

find-skills Same topic
vercel-labs/skills

Helps users discover and install agent skills when they ask questions like "how do I do X", "fi…

3.3M installs
agent-browser Same topic
vercel-labs/agent-browser

Browser automation CLI for AI agents. Use when the user needs to interact with websites, includ…

810.4K installs
vercel-react-best-practices Same topic
vercel-labs/agent-skills 697.8K installs
web-design-guidelines Same topic
vercel-labs/agent-skills

Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "chec…

617.3K installs
microsoft-foundry Same topic
microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …

576.5K installs
azure-prepare Same topic
microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Te…

568.3K installs

Also in this package

Other skills from near/agent-skills · top by installs.

npx skills add near/agent-skills
near-intents 117 near-api-js 61 near-smart-contracts 58 near-kit 47 near-dapp 38 near-ai-cloud 38 near-cli-rs 19 near-ai 9 near-connect 8 near-connect-hooks 6

Browse all from near/agent-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 14
Default branch main
Open issues 1
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 3,197 B
  • docs SUMMARY.md 315 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 38 installs

SKILL.md

NEAR Contract Audit

Security audit skill for NEAR smart contracts in Rust.

Audit Workflow

Phase 1: Automated Analysis

Run your preferred Rust static analysis and NEAR-focused security tools on the contract to:

  • Scan for common vulnerability patterns (reentrancy, unsafe math, unhandled promises, access control issues, etc.)
  • Highlight potentially risky patterns for deeper manual review

Phase 2: Manual Review

After automated analysis, perform manual review for:

  • Business logic vulnerabilities
  • Access control patterns
  • Economic attack vectors
  • Cross-contract interaction safety

Phase 3: Code-Specific Analysis

For each finding, verify:

  1. Is it a true positive?
  2. What is the exploitability?
  3. What is the recommended fix?

Phase 4: Report Generation

Document findings with severity, location, description, and remediation.

Vulnerability Quick Reference

Severity Detector ID Description
High non-private-callback Callback missing #[private] macro
High reentrancy State change after cross-contract call
High incorrect-argument-or-return-types Using native integer types in JSON interfaces
High unsaved-changes Collection modifications not persisted
High owner-check Missing caller/owner verification
High yocto-attach Missing assertoneyocto on sensitive functions
High storage-collision Same storage prefix for different collections
High required-initialization-macro Missing #[init] on initialization method
Medium gas-griefing Unbounded loops causing DoS
Medium insecure-random Predictable randomness from block data
Medium prepaid-gas Insufficient gas reserved for callbacks
Low cover-storage-cost Missing storage deposit verification
Low unsafe-math Arithmetic without overflow checks
Low float-math Using floating point types for financial math

Reference Files

For detailed vulnerability documentation with code examples:

  • [high-severity.md](references/high-severity.md) - Critical vulnerabilities (8 detectors)
  • [medium-severity.md](references/medium-severity.md) - Medium vulnerabilities (4 detectors)
  • [low-severity.md](references/low-severity.md) - Low severity findings (3 detectors)