Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By slvDev
AI-powered auditing of Solidity smart contracts: perform static analysis in quick/full modes, filter false positives, optimize gas for EVM/L2 chains, validate vulnerabilities, generate exploit POCs with tests, simplify/refactor code, explain risks, and produce Markdown reports.
npx claudepluginhub joshuarweaver/cascade-code-testing-misc --plugin slvdev-weaselStatic analysis and security review for Solidity smart contracts. Triggers on weasel analyze, weasel audit, weasel scan, weasel review, or weasel check.
Code explanation and understanding for Solidity smart contracts. Triggers on weasel explain, weasel what does, or weasel walkthrough.
False positive filtering for Weasel static analysis results. Triggers on weasel filter, weasel triage, or weasel clean report.
Gas optimization analysis and implementation for Solidity contracts. Triggers on weasel gas, weasel optimize, or weasel efficiency.
Project overview and audit preparation for smart contract security. Triggers on weasel overview, weasel scope, or weasel onboard.
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
AI-powered smart contract security auditor with parallel hunt lanes, Devil's Advocate verification, static analysis (Slither, Aderyn), fuzz testing (Echidna, Medusa), symbolic execution (Halmos), Solodit intelligence, and interactive Map-Hunt-Attack methodology
Audits Solidity codebases for smart contract vulnerabilities using a four-phase workflow covering 36 vulnerability classes.
Multi-dimensional smart contract security auditing using Behavioral State Analysis (BSA). Combines behavioral intent extraction, parallel threat engines (economic, access control, state integrity), adversarial simulation with PoC generation, and Bayesian confidence scoring.
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
Crypto wallet security auditor for reviewing wallet implementations, key management, signing flows, and common vulnerability patterns.
Blockchain development with Solidity security, DeFi protocols, NFT standards, and Web3 testing
Solidity static analyzer you can talk to
Ask your AI assistant to audit your contracts. Get explained results.
# 1. Install weasel
curl -L https://raw.githubusercontent.com/slvDev/weasel/main/weaselup/install | bash
# 2. Add to your AI tool:
# Claude Code (recommended - MCP + skills)
/plugin marketplace add slvDev/weasel
/plugin install weasel
# MCP only for Claude Code, Cursor, Windsurf, Codex, Gemini
weasel mcp add
Now just say weasel <command>:
"weasel analyze my contracts"
"weasel poc for this reentrancy bug"
"weasel report this finding"
"weasel explain this function"
Weasel skills activate. Your AI runs analysis, writes PoCs, formats reports, and more.
| Weasel | Other Analyzers | |
|---|---|---|
| AI Integration | Native skills + MCP | Copy-paste output to ChatGPT |
| Setup | plugin install / mcp add | Manual config, scripts |
| Workflow | "weasel poc for this bug" | Read reports, search fixes |
| Context | AI knows Solidity security patterns | Context lost between tools |
| Speed | Parallel Rust analysis | Often single-threaded |
curl -L https://raw.githubusercontent.com/slvDev/weasel/main/weaselup/install | bash
Update anytime with weaselup. Use weaselup --nightly for latest dev build.
git clone https://github.com/slvDev/weasel.git
cd weasel && cargo build --release
For Claude Code users, install the Weasel plugin for intelligent skills:
/plugin marketplace add slvDev/weasel
/plugin install weasel
Use weasel prefix to activate skills:
Audit:
| Skill | What it does |
|---|---|
weasel analyze | Security review (quick scan / manual review / full audit) |
weasel validate | Verify if attack hypothesis is exploitable |
weasel filter | Triage findings, filter false positives |
weasel poc | Write exploit PoC (Foundry/Hardhat) |
weasel report | Format findings as professional audit report |
weasel overview | Scope project, map architecture/attack surface |
Dev:
| Skill | What it does |
|---|---|
weasel gas | Find and implement gas optimizations |
weasel explain | Explain code logic, patterns, and risks |
weasel simplify | Refactor for clarity without changing behavior |
Skills provide context-aware expertise — Claude knows how to analyze Solidity, write PoCs in Foundry/Hardhat, format audit reports, and more. The weasel prefix ensures skills only activate when you want them.
To update the plugin, run
/plugin update weaselin Claude Code.
For Cursor, Windsurf, Codex, Gemini, or Claude Code without skills:
weasel mcp add # auto-detect all installed IDEs
weasel mcp add --target cursor # Cursor only
weasel mcp add --target windsurf # Windsurf only
weasel mcp add --target claude # Claude Code only
weasel mcp add --target codex # OpenAI Codex only
weasel mcp add --target gemini # Gemini CLI only