{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/3"}],"enrichment":{"capability":"Slither is a static analysis framework for Solidity and Vyper smart contracts that detects vulnerabilities, generates contract information reports, and provides an API for writing custom analyses.","skillfed_tags":["smart-contracts","security-analysis","solidity"],"use_cases":["Scan a Solidity codebase during development to catch high-impact vulnerabilities before deployment","Integrate Slither into a GitHub Actions workflow to flag security issues on every pull request","Analyze a Vyper contract for state variable shadowing, uninitialized storage, and other common mistakes","Write a custom detector in Python to enforce project-specific contract coding rules or patterns","Generate a markdown checklist report of contract findings for security review or audit documentation"],"what_it_does":"Slither is a Python-based static analysis framework designed to scan Solidity and Vyper smart contracts for security vulnerabilities and code quality issues. It runs a suite of built-in detectors that identify common patterns like uninitialized state variables, arbitrary fund transfers, and storage array misuse, then reports findings with source code locations. The framework also includes 'printers' that generate visual summaries of contract structure and behavior, and exposes an API for developers to write custom analyses in Python.\n\nThe tool integrates into development workflows through CI/CD systems, pre-commit hooks, and build frameworks like Hardhat and Foundry. It depends on crytic-compile to handle contract compilation, web3 and eth-utils for blockchain interaction, and pycryptodome for cryptographic operations. Installation is straightforward via pip, though you need Python 3.10+ and a Solidity compiler (solc) if analyzing standalone files outside a supported build framework.","worth_installing":"Yes, with conditions. Slither is actively maintained, has low install friction, and is widely used in the Ethereum ecosystem for contract security analysis. However, the AGPL-3.0 license requires that any modifications or derivative works be released under the same license\u2014ensure this aligns with your project's licensing model before integrating it into proprietary software. For open-source projects or internal security tooling, it is a solid choice."},"id":"slither-analyzer","links":{"html":"https://skillfed.io/packages/slither-analyzer","md":"https://skillfed.io/packages/slither-analyzer.md","pypi":"https://pypi.org/project/slither-analyzer/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-28","license_spdx":null,"license_treatment":"agpl","name":"slither-analyzer","python_support":"supports_current","summary":"Slither is a Solidity and Vyper static analysis framework written in Python 3."},"popularity":{"monthly_downloads":184500,"position":10035,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.11.6"}