Level up your Solidity LLM tooling with Slither-MCP

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://blog.trailofbits.com/2025/11/15/level-up-your-solidity-llm-tooling-with-slither-mcp/
• Blog Title: Level up your Solidity LLM tooling with Slither-MCP
• Suggested Section: Blockchain & Crypto > Solidity Static Analysis (Slither) > Slither-MCP: LLM-assisted Solidity auditing

🎯 Content Summary

What it is: Trail of Bits released Slither-MCP, an MCP server that exposes Slither’s Solidity static analysis to LLMs. It gives LLMs deterministic, program-analysis-backed answers for source lookup, call-graph navigation, inheritance resolution, and detector runs across real-world Solidity codebases (Foundry, Hardhat, etc.).

Why it matters: LLMs are probabilistic and often rely on brittle grep/🔧 Technical Details

Deterministic code understanding via MCP-backed static analysis: When auditing Solidity, replace probabilistic grep/read_file with MCP calls to Slither. Use get_function_source to resolve the canonical implementation across imports and inheritance, then enumerate callers/callees to build accurate usage paths for targeted functions (e.g., ERC20.transfer()).

Signature-to-implementation mapping to avoid false positives: Query by function signature (e.g., IOracle.price(...)) to programmatically find concrete implementations, ensuring subsequent analysis (detectors, call tracing) operates on the correct contract.

Focused triage with scoped detector runs: Invoke Slither’s detector suite and filter results to specific contracts/functions to quickly surface high-signal findings in large codebases.

🤖 Agent Actions

I analyzed the blog and the repository and found there wasn’t an existing page specifically covering Slither-MCP. The most relevant location to integrate this content is the existing Slither-focused page under Blockchain > Smart Contract Security: “Mutation Testing for Solidity with Slither (slither-mutate).” I updated that file by adding a concise, technical section describing Slither-MCP, its capabilities, auditing workflow improvements, and setup steps for Claude Code and Cursor IDE. I also added the blog and the Slither-MCP GitHub repo to the References.

Summary of changes implemented:

• File updated: src/blockchain/smart-contract-security/mutation-testing-with-slither.md
• Added section: “LLM-assisted Solidity auditing with Slither-MCP”
  • What Slither-MCP is and why it matters
  • Capabilities exposed via MCP tools:
    • Source extraction across imports/inheritance
    • Call graph navigation (callers/callees)
    • Inheritance introspection
    • Signature-to-implementation resolution
    • Scoped Slither detector runs
  • Auditing workflow example for ERC20.transfer
  • Usage tips for deterministic, scoped analysis
  • Setup snippets:
    • Claude Code: claude mcp add … uvx … slither-mcp
    • Cursor: ~/.cursor/mcp.json configuration
• References updated with:
  • Trail of Bits blog post
  • Slither-MCP GitHub repository

Reasoning:

• This is highly technical content directly applicable to Solidity auditing workflows and fits under Slither-related smart contract security content.
• Creating a new file would require additional linking (and multiple file edits), which is avoided by augmenting the existing Slither page.
• The addition focuses on concrete auditing workflows and deterministic program analysis, aligning with HackTricks’ technical and concise style.

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

• MD files processed: 910
• MD files fixed: 1

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://blog.trailofbits.com/2025/11/15/level-up-your-solidity-llm-tooling-with-slither-mcp/

Content Categories: Based on the analysis, this content was categorized under "Blockchain & Crypto > Solidity Static Analysis (Slither) > Slither-MCP: LLM-assisted Solidity auditing".

Repository Maintenance:

• MD Files Formatting: 910 files processed (1 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0