develop-secure-contracts — Claude Code skill: what it does & setup

What develop-secure-contracts does

This skill directs the assistant to inspect your project before writing smart contracts. It searches for existing files and checks installed dependencies across Hardhat, Foundry, Scarb, Cargo, or Move environments. Instead of replacing contracts, it prioritizes integrating changes into your existing codebase. The skill strictly bans copying library internals directly into user files, because unmanaged clones miss critical package security updates.

When adding access controls or token logic, the agent can invoke npx @openzeppelin/contracts-cli to build a clean baseline. Diffing this baseline against the target feature reveals exact hooks and storage layouts needed for your contract. If no generator command exists, the assistant explores installed package files and documentation comments directly. Whenever a source file cannot be read, the agent must report the failed path immediately instead of guessing.