Secure Workflow Guide skill: what it does and how to install it

What it does. Explores a smart contract codebase and runs a five-step review: Slither scanning, applicable upgradeability and ERC checks, security diagrams, property documentation with fuzzing or symbolic testing, and manual checks for privacy, front-running, cryptography and DeFi risks. Produces prioritised findings and an action plan.

When to use it. For end-to-end smart contract security reviews on each check-in, before deployment, or when triaging Slither findings. It adapts checks to the tools and features present in the project.