soliint - AI Security for Solidity

soliint is a free, open-source static auditor and linter for Solidity smart contracts. It is designed with Foundry developers in mind and offers a comprehensive suite of security analysis tools.

• 19 Vulnerability Rules: Covers a wide range of security issues from reentrancy to floating pragmas.
• AI Deep Audit (nuke): Utilizes AI for in-depth security analysis, including exploit Proof of Concept (PoC) specifications, hack correlation, and a 17-check checklist.
• Autofix: Automatically fixes identified vulnerabilities with a fix-verify loop.
• Professional Reporting: Generates reports in multiple formats including HTML, PDF, JSON, and SARIF.
• CI/CD Integration: Includes a GitHub Action for seamless integration into your development workflow, providing PR comments for immediate feedback.
• MCP Server: Features an MCP server that supports various AI agents such as Claude Code, Cursor, Windsurf, Hermes, Codex, OpenCode, OpenClaw, and Pi, enabling advanced AI-assisted code analysis.
• Zero Python Dependency: Built entirely with TypeScript and distributed as a single npm package, eliminating the need for Python and reducing dependency issues.
• Real-time Analysis: Offers a watch mode to monitor code changes and provide instant feedback on security status.
• Additional Analyzers: Includes analyzers for gas usage, storage, and code coverage.

soliint provides real output with real reports, ensuring that developers have the tools they need to build secure and robust smart contracts.