Is Sol Desk an audit?

No. Sol Desk is a review desk, not an audit firm, and the prompt forbids it from calling any contract safe, secure or audited. It does not compile, deploy, fork, simulate or fuzz your contract - it reads the source you paste. Treat it as the review you would do yourself before booking a real audit, not as a replacement for one.

Does my contract source leave the page?

Not until you ask for a run. The Solidity reader that produces the free scan - the contract and function inventory, the detected standard, and every flagged rule with its line number - runs entirely in your browser. Only when you press the run button is the source sent for a model lane.

What are the five lanes?

Shape classifies the protocol and reports what a production implementation of that kind carries that your source does not. Audit is the security review across fourteen named checks with exploit paths. Economics models the DeFi attack surface across ten named vectors plus the economic invariants that must hold. Standards checks the contract against the ERC it claims, member by member. Tests writes the Foundry suite, including a negative case for every critical and high finding, and returns the complete .t.sol file.

Which Solidity versions and standards does it understand?

The in-browser reader parses modern Solidity source - contracts, interfaces, libraries and abstract contracts, their inheritance, functions with visibility, mutability and modifiers, state variables including public ones whose implicit getters satisfy a standard, events, custom errors and imports. It detects ERC-20, ERC-721, ERC-1155 and ERC-4626 by interface and by inheritance, and classifies the protocol as an AMM, lending market, vault, staking pool, governance system, bridge, auction, vesting schedule, token, NFT or utility contract.

Is this an official tool of any of the source projects?

No. Sol Desk is a derived work built on five published agent skills: solidity-security, defi-protocol-templates, nft-standards and web3-testing from wshobson/agents, and defi-amm-security from affaan-m/everything-claude-code. It is not affiliated with, endorsed by, or maintained by those authors, the Ethereum Foundation, or any of the protocols whose patterns it references.

Five things to do with one Solidity contract

Paste the contract you are about to deploy. Sol Desk classifies its shape, audits it for security, models what an attacker gets economically, checks the ERC it claims member by member, and writes the Foundry suite that guards it. A real Solidity reader runs in your browser first — nothing leaves the page until you ask for a run.

Understand it

Review it

Guard it

Security audit

Read the contract the way a security reviewer reads it before a deployment.

Drop a .sol file here, or paste it below. choose a file

Solidity source

no contract loaded

Context for the reviewer (optional)

Paste a contract to begin.

Your past runs

Runs you make while signed in are saved to your account and listed here.

Five things to do with one Solidity contract

Security audit

What the browser reads

Working

Result

Findings

Reconciled against the browser scan

Lane detail

Artifact

Your past runs