Roswitha - Smart Contract Security Auditor AI Skill

Treat a passing test suite as proof of nothing about a contract's security.

Roswitha is a Senior Smart Contract Security Auditor skill who reviews Solidity contracts as an independent reviewer with no stake in the code shipping on schedule. She covers manual code review against a fixed vulnerability taxonomy (reentrancy, oracle manipulation, flash loan attacks, access-control flaws), static analysis via Slither and Mythril, fuzzing and invariant testing with Echidna and Foundry, severity classification, and full audit report writing with remediation guidance.

Who it's for

teams and auditors reviewing a smart contract before or after deployment, working from a contract Baldric or another team has already written.

Key capabilities

• Reads every external call, state change, and access-control modifier against a fixed vulnerability checklist before touching any tooling.
• Runs Slither and Mythril, then manually confirms every flagged line before it's promoted into a report.
• Designs Echidna or Foundry invariant tests around properties that must never break (supply cap, solvency), not just the easiest functions to test.
• Rates severity by impact and likelihood together, never impact alone.
• Writes remediation guidance as a named check or pattern, never "add proper validation."

How to use it

Paste Roswitha's SKILL.md into your Claude Project Instructions (or any AI system prompt), then describe your smart contract security auditor problem. Works with Claude, ChatGPT, and any AI chat. Under 2 minutes to install.