Weasel
Solidity static analyzer you can talk to
Ask your AI assistant to audit your contracts. Get explained results.
# 1. Install weasel
curl -L https://raw.githubusercontent.com/slvDev/weasel/main/weaselup/install | bash
# 2. Add to your AI tool:
# Claude Code (recommended - MCP + skills)
/plugin marketplace add slvDev/weasel
/plugin install weasel
# MCP only for Claude Code, Cursor, Windsurf, Codex, Gemini
weasel mcp add
Now just say weasel <command>:
"weasel analyze my contracts"
"weasel poc for this reentrancy bug"
"weasel report this finding"
"weasel explain this function"
Weasel skills activate. Your AI runs analysis, writes PoCs, formats reports, and more.
Features
- AI-Native Skills — 9 specialized skills for Claude Code (PoC writing, report formatting, gas optimization, and more)
- Blazing Fast — Parallel Rust analysis, instant MCP responses
- MCP Server — Works with Claude Code, Cursor, Windsurf, OpenAI Codex, Gemini CLI, and any MCP-compatible tool
- Extensive Detectors — Vulnerabilities, gas optimizations, and code quality checks
- Auto-Detection — Automatically configures for Foundry, Hardhat, and Truffle projects
Why Weasel?
| Weasel | Other Analyzers |
|---|
| AI Integration | Native skills + MCP | Copy-paste output to ChatGPT |
| Setup | plugin install / mcp add | Manual config, scripts |
| Workflow | "weasel poc for this bug" | Read reports, search fixes |
| Context | AI knows Solidity security patterns | Context lost between tools |
| Speed | Parallel Rust analysis | Often single-threaded |
Installation
curl -L https://raw.githubusercontent.com/slvDev/weasel/main/weaselup/install | bash
Update anytime with weaselup. Use weaselup --nightly for latest dev build.
From Source
git clone https://github.com/slvDev/weasel.git
cd weasel && cargo build --release
Claude Code Integration
For Claude Code users, install the Weasel plugin for intelligent skills:
/plugin marketplace add slvDev/weasel
/plugin install weasel
Use weasel prefix to activate skills:
Audit:
| Skill | What it does |
|---|
weasel analyze | Security review (quick scan / manual review / full audit) |
weasel validate | Verify if attack hypothesis is exploitable |
weasel filter | Triage findings, filter false positives |
weasel poc | Write exploit PoC (Foundry/Hardhat) |
weasel report | Format findings as professional audit report |
weasel overview | Scope project, map architecture/attack surface |
Dev:
| Skill | What it does |
|---|
weasel gas | Find and implement gas optimizations |
weasel explain | Explain code logic, patterns, and risks |
weasel simplify | Refactor for clarity without changing behavior |
Skills provide context-aware expertise — Claude knows how to analyze Solidity, write PoCs in Foundry/Hardhat, format audit reports, and more. The weasel prefix ensures skills only activate when you want them.
To update the plugin, run /plugin update weasel in Claude Code.
IDE Integration (MCP)
For Cursor, Windsurf, Codex, Gemini, or Claude Code without skills:
weasel mcp add # auto-detect all installed IDEs
weasel mcp add --target cursor # Cursor only
weasel mcp add --target windsurf # Windsurf only
weasel mcp add --target claude # Claude Code only
weasel mcp add --target codex # OpenAI Codex only
weasel mcp add --target gemini # Gemini CLI only
'%20stop-opacity%3D'0.16'%2F%3E%3Cstop%20offset%3D'1'%20stop-color%3D'rgb(200%2C90%2C60)'%20stop-opacity%3D'0.03'%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Crect%20width%3D'320'%20height%3D'200'%20fill%3D'url(%23g)'%2F%3E%3Ccircle%20cx%3D'250'%20cy%3D'56'%20r%3D'92'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.06'%2F%3E%3Ccircle%20cx%3D'64'%20cy%3D'172'%20r%3D'58'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.05'%2F%3E%3C%2Fsvg%3E)
