onflow/flow-ai-tools/cadence-lang
Claude Code and agent skill by onflow/flow-ai-tools
- community
Checking that the SKILL.md file is still in the repository.
Comprehensive guide for writing correct, secure, and idiomatic Cadence smart contract code on the Flow blockchain. Covers language fundamentals (resources, contracts, transactions, interfaces, accounts, references, imports), access control and entitlements, capabilities, pre/post conditions, security best practices (including checks-effects-interactions, trust-boundary validation, and bounded loops), anti-patterns to avoid, proven design patterns, style and readability rules, and numeric precision with checked arithmetic. TRIGGER when: writing or debugging Cadence code, asking about Cadence syntax, access(self), access(all), entitlements, resources, move operator (<-), capabilities, references, pre/post conditions, storage paths, optional binding, if let, guard let, force-unwrap, string templates, UFix128, Fix128, fixed-point precision, overflow, checks-effects-interactions, reentrancy, "how do I write cadence", "cadence error", "compile error in .cdc", "what does access(self) mean", "how do resources work", "capability-based security", "is this cadence idiomatic". DO NOT TRIGGER when: building NFT/FT token contracts (use cadence-tokens), setting up flow.json or FCL (use flow-project-setup), reviewing existing code for vulnerabilities (use cadence-audit), generating new contracts from scratch (use cadence-scaffold), sourcing prices or designing an emergency pause for a protocol (use flow-defi).
Install
npx vskill@latest install onflow/flow-ai-tools/cadence-langSKILL.md
Cadence Language Guide
Write secure, correct Cadence code by following these rules. Cadence uses resource-oriented programming, capability-based security, and explicit access control.
Key Principles
- Secure by default — start with
access(self), expand only when needed - Resource safety — resources exist in one place, must be explicitly moved (
<-) or destroyed - Capability-based security — access delegated through unforgeable, revocable capabilities
- Explicit over implicit — force developers to make security decisions
- Document generated code — follow the Cadence documentation conventions in the relevant reference docs
- Fail with a message — never force-unwrap; bind the optional or
?? panic("…")with what went wrong - Precision is a design decision — arithmetic is checked and division truncates, so pick the type and the operand order deliberately
Navigation Map
Read the relevant reference file based on your task:
| Task | Reference | |
|---|---|---|
| Import patterns, flow.json setup | imports.md | |
| Resource lifecycle, move operator | resources.md | |
| Contract structure, init, deployment | contracts.md | |
| Transaction phases, entitlements | transactions.md | |
| Documentation conventions | documentation.md | |
| Interfaces, intersection types | interfaces.md | |
| Account storage, keys, capabilities | accounts.md | |
| References, authorized refs | references.md | |
| Access modifiers, visibility rules | access-control.md | |
| Entitlements, mappings, Identity, sets | entitlements.md | |
| Capabilities, security model | capabilities.md | |
Pre/post conditions, before() | conditions.md | |
| Security best practices | security-best-practices.md | |
| Anti-patterns to avoid | anti-patterns.md | |
| Design patterns | design-patterns.md | |
Naming, optionals, let/var, string templates | style.md | |
| Fixed-point precision, checked arithmetic | numerics.md | |
| Gotchas versus other languages | language-facts.md |
Read style.md and language-facts.md whenever writing or editing Cadence — they carry the rules most often missed. For security-sensitive tasks, also read security-best-practices.md and anti-patterns.md; for contracts that hold or price value, add numerics.md.
Companion Skills
This skill provides the language foundation. Other skills build on it:
- `cadence-testing` — Use alongside when writing tests for Cadence code. Tests are Cadence too and must follow every rule in this skill.
- `cadence-tokens` — Use alongside this skill when building NFT/FT contracts. Token contracts must follow all rules here plus token-specific standards.
- `cadence-audit` — Use to verify code follows the security rules and patterns documented here.
- `cadence-scaffold` — Use to generate contracts/transactions that follow these rules by default.
- `flow-defi` — Use alongside when the contract prices assets, integrates foreign token contracts, or gates a live market.
protocol-safety.mdthere carries the oracle, foreign-contract, and emergency-stop rules that sit on top of this skill's security rules. - `flow-cli` — Use to deploy and test the Cadence code written with this skill's guidance.
- `flow-react-sdk` — Use when the Cadence scripts/transactions will be called from React hooks.
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingplugins/flow-dev/skills/cadence-lang/SKILL.md
Popularity
- 7-day trend score
- 0
Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/onflow/flow-ai-tools/cadence-lang)