--- title: "Guidelines Advisor - Air Market" description: "You have smart contract code and you want to know where it is weak before it matters. This reads the codebase and reports back on architecture, upgrade patterns, implementation quality, known pitfall…" canonical: "https://airmarket.ai/app/guidelines-advisor" --- [Air Market](/) / [Security](/category/security) / Guidelines Advisor Skill by [Trail of Bits](/@trailofbits) # Guidelines Advisor A second read on your contracts before anyone else looks ## What this does You have smart contract code and you want to know where it is weak before it matters. This reads the codebase and reports back on architecture, upgrade patterns, implementation quality, known pitfalls, dependencies and testing, and it writes documentation and specifications from what it finds. Reach for it before a review or a launch. ### Top 3 things it does for you - Get an architecture review of a contract codebase - Check how upgradeability is handled - Find the pitfalls in what you have written ## Information **Guidelines Advisor at a glance** | | | | --- | --- | | Kind | Skill | | Publisher | [Trail of Bits](/@trailofbits) | | Category | [Security](/category/security) | | Works with | Agent Skills - an open standard supported by 40+ agents | | Size | 30 KB | | Licence | CC-BY-SA-4.0 | | Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/guidelines-advisor) | | GitHub stars | 6,823 (as of Nov 2026) | | Installs | 5,859, counted by skills.sh (Nov 2026) | ## Security report **Verified.** AIR scanned this exact version of Guidelines Advisor and flagged nothing. AIR's verdict: **safe**. **What Guidelines Advisor's check was run against** | | | | --- | --- | | Commit | d5fe2e6a7896236c3102fd5477e833623ad70298 | | Content hash | 381b735c50f7346f25e40e535e39acb1101f38a8102859b1c96b6f9fb9f9a055 | | Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/guidelines-advisor/SKILL.md) | A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned. [Read the full security report for Guidelines Advisor](/security/guidelines-advisor) ## About Guidelines Advisor A smart contract development advisor built on Trail of Bits' best practices. It reads the codebase rather than working from a description of it. From that reading it can generate documentation and specifications, review the architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing. What comes back is framed as actionable recommendations. ## What's inside - SKILL.md - instructions - agents/openai.yaml - data - assets/trail-of-bits-mark.svg - template - resources/ASSESSMENT_AREAS.md - reference - resources/DELIVERABLES.md - reference - resources/EXAMPLE_REPORT.md - reference ## Questions ### Is Guidelines Advisor safe to install? AIR scanned this exact version of Guidelines Advisor and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d5fe2e6a7896, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/guidelines-advisor. ### How do I install Guidelines Advisor? Open https://airmarket.ai/app/guidelines-advisor on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/building-secure-contracts/skills/guidelines-advisor. Install from that link, not the branch. ## Related on Air Market - [More Security listings](/category/security) - [Everything by Trail of Bits](/@trailofbits) --- Canonical URL: