English Français العربية

Kestrova: Solidity Vulnerability Scan

السجل الرسمي الأمن

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

الشيفرة المصدرية الموقع التوثيق

ماذا يمكنك أن تفعل مع Kestrova: Solidity Vulnerability Scan؟

  • scan_solidity_preview (free, no key): severity counts and High/Medium detector names.
  • scan_solidity_full (paid, optional): every finding with detector, impact, confidence and file/line locations.
  • payment_terms (free): current price and payment details.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http kestrova-solidity-vulnerability-scan 'https://kestrova.onrender.com/mcp?src=registry'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "kestrova-solidity-vulnerability-scan": {
            "type": "http",
            "url": "https://kestrova.onrender.com/mcp?src=registry"
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Kestrova: Solidity security review for coding agents
  2. Install (pick one)
  3. What it does
  4. Limits (read this)
  5. Privacy
  6. Contents

Kestrova: Solidity security review for coding agents

An agent skill plus a remote MCP server. When your coding agent writes, changes or prepares to deploy a Solidity contract, it runs a free Slither static-analysis preview, explains the results without overclaiming, and offers an optional paid line-level report only after you approve the price.

Install (pick one)

AgentCommand
Claude Code (plugin: skill + MCP)/plugin marketplace add som2026-commits/kestrova-solidity-security then /plugin install solidity-security-review@kestrova
Any agent that supports skills (SKILL.md)npx skills add som2026-commits/kestrova-solidity-security --skill solidity-security-review
MCP only (any MCP client)remote Streamable HTTP server https://kestrova.onrender.com/mcp?src=registry (Claude Code: claude mcp add --transport http kestrova "https://kestrova.onrender.com/mcp?src=skill")

In our tests, agents with only the MCP server did not run the check unprompted; the skill is what makes them do it.

What it does

  • scan_solidity_preview (free, no key): severity counts and High/Medium detector names.
  • scan_solidity_full (paid, optional): every finding with detector, impact, confidence and file/line locations. Paid per call via x402 in USDC on Solana from your own wallet tool; charged only if the scan succeeds. The skill forbids paying without your explicit approval and never handles keys.
  • payment_terms (free): current price and payment details.

Limits (read this)

Automated pattern detection (Slither), not an audit. A clean result does not mean a contract is safe. Not covered: business logic, economic/oracle/MEV attacks, access-control intent, upgrade and admin-key risk, code not sent, deployment configuration. Use professional audits and tests for anything holding value.

Privacy

Sources you send are scanned in a temporary directory that is deleted after each scan; the service does not store or log them. The service's usage log records the route, status, client family and the src install-channel tag, never IP addresses or source code (IP addresses are held in memory only for rate limiting). The hosting providers (Render, Cloudflare) may keep their own standard request logs.

Contents

.claude-plugin/marketplace.json (marketplace), solidity-security-review/ (plugin: .claude-plugin/plugin.json, .mcp.json, skills/solidity-security-review/SKILL.md). No server code.

License: MIT (see LICENSE).

الأسئلة الشائعة

ما هو Kestrova: Solidity Vulnerability Scan؟

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

كيف أثبّت Kestrova: Solidity Vulnerability Scan؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http kestrova-solidity-vulnerability-scan 'https://kestrova.onrender.com/mcp?src=registry'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Kestrova: Solidity Vulnerability Scan إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل Kestrova: Solidity Vulnerability Scan مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون Kestrova: Solidity Vulnerability Scan؟

ينشره som2026-commits. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.