Smart Contract Auditor
Analysis pipeline that runs static analysis over Solidity sources and groups findings into a reviewable report.
Overview
Tooling that automates the mechanical first pass of a contract review, so manual attention goes to the findings that need judgement rather than to running the same commands each time.
Problem
The opening hours of a review are repetitive: run the analysers, dedupe overlapping findings, sort by severity, and discard the noise. Doing this by hand every time is slow and easy to do inconsistently.
Solution
A pipeline that compiles the target, runs Slither, and normalises findings into one schema. Overlapping detections collapse into a single entry, results group by severity and affected contract, and output is a structured report rather than raw tool logs.
Architecture
A TypeScript orchestrator drives compilation and analysis as discrete stages. Each analyser has an adapter emitting the shared finding schema, so adding a tool does not change the reporting layer. Foundry handles compilation and test execution.
Key features
- Automated compile-and-analyse pipeline
- Normalised finding schema across analysers
- Deduplication of overlapping detections
- Grouping by severity and affected contract
- Structured report output for review
Technology stack
Current status
Under active development and not released. To be explicit: this is tooling that assists a review — it has not been used to produce any published audit, and no findings from it are disclosed anywhere.
Links
No public repository or deployment for this project yet, so there is nothing to link here. I would rather leave this empty than point at something that does not exist — happy to talk through the work directly. Get in touch.